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Cable/DSL Broadband Router with VPN 

♦ EZ 3 -click Installation Wizard 

• Simple 3 step installation utility allows for easy configuration 

♦ Configurable Parental Control 

• Protect your family by limiting access to web sites with URL 
and keyword blocking 

♦ Stateful Packet Inspection Firewall 

♦ Firewall - Client Privileges, Intrusion Detection, NAT 

♦ Built-in VPN Tunneling capability 

♦ Multi-user Access (up to 253), Single-user Account 
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Limited Warranty 



Limited Warranty Statement: SMC Networks, Inc. ("SMC") warrants its products to 
be free from defects in workmanship and materials, under normal use and service, for 
the applicable warranty term. All SMC products carry a standard 90-day limited 
warranty from the date of purchase from SMC or its Authorized Reseller. SMC may, 
at its own discretion, repair or replace any product not operating as warranted with a 
similar or functionally equivalent product, during the applicable warranty term. SMC 
will endeavor to repair or replace any product returned under warranty within 30 days 
of receipt of the product. 

The standard limited warranty can be upgraded to a Limited Lifetime* warranty by 
registering new products within 30 days of purchase from SMC or its Authorized 
Reseller. Registration can be accomplished via the enclosed product registration card or 
online via the SMC web site. Failure to register will not affect the standard limited 
warranty. The Limited Lifetime warranty covers a product during the Life of that 
Product, which is defined as the period of time during which the product is an "Active" 
SMC product. A product is considered to be "Active" while it is listed on the current 
SMC price list. As new technologies emerge, older technologies become obsolete and 
SMC will, at its discretion, replace an older product in its product line with one that 
incorporates these newer technologies. At that point, the obsolete product is 
discontinued and is no longer an "Active" SMC product. A list of discontinued 
products with their respective dates of discontinuance can be found at: 
http:/ /www.smc.com/index.cfm?action=customer_service_warranty. 

All products that are replaced become the property of SMC. Replacement products 
may be either new or reconditioned. Any replaced or repaired product carries either a 
30-day limited warranty or the remainder of the initial warranty, whichever is longer. 
SMC is not responsible for any custom software or firmware, configuration 
information, or memory data of Customer contained in, stored on, or integrated with 
any products returned to SMC pursuant to any warranty. Products returned to SMC 
should have any customer-installed accessory or add-on components, such as expansion 
modules, removed prior to returning the product for replacement. SMC is not 
responsible for these items if they are returned with the product. 

Customers must contact SMC for a Return Material Authorization number prior to 
returning any product to SMC. Proof of purchase may be required. Any product 
returned to SMC without a valid Return Material Authorization (RMA) number 
clearly marked on the outside of the package will be returned to customer at 
customer's expense. For warranty claims within North America, please call our 
toll-free customer support number at (800) 762-4968. Customers are responsible for all 
shipping charges from their facility to SMC. SMC is responsible for return shipping 
charges from SMC to customer. 
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Limited Warranty 



WARRANTIES EXCLUSIVE: IF AN SMC PRODUCT DOES NOT OPERATE 
AS WARRANTED ABOVE, CUSTOMER'S SOLE REMEDY SHALL BE REPAIR 
OR REPLACEMENT OF THE PRODUCT IN QUESTION, AT SMC'S OPTION. 
THE FOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND 
ARE IN LIEU OF ALL OTHER WARRANTIES OR CONDITIONS, EXPRESS 
OR IMPLIED, EITHER IN FACT OR BY OPERATION OF LAW, STATUTORY 
OR OTHERWISE, INCLUDING WARRANTIES OR CONDITIONS OF 
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. SMC 
NEITHER ASSUMES NOR AUTHORIZES ANY OTHER PERSON TO 
ASSUME FOR IT ANY OTHER LIABILITY IN CONNECTION WITH THE 
SALE, INSTALLATION, MAINTENANCE OR USE OF ITS PRODUCTS. SMC 
SHALL NOT BE LIABLE UNDER THIS WARRANTY IF ITS TESTING AND 
EXAMINATION DISCLOSE THE ALLEGED DEFECT IN THE PRODUCT 
DOES NOT EXIST OR WAS CAUSED BY CUSTOMERS OR ANY THIRD 
PERSON'S MISUSE, NEGLECT, IMPROPER INSTALLATION OR TESTING, 
UNAUTHORIZED ATTEMPTS TO REPAIR, OR ANY OTHER CAUSE 
BEYOND THE RANGE OF THE INTENDED USE, OR BY ACCIDENT, FIRE, 
LIGHTNING, OR OTHER HAZARD. 

LIMITATION OF LIABILITY: IN NO EVENT, WHETHER BASED IN 
CONTRACT OR TORT (INCLUDING NEGLIGENCE), SHALL SMC BE 
LIABLE FOR INCIDENTAL, CONSEQUENTIAL, INDIRECT, SPECIAL, OR 
PUNITIVE DAMAGES OF ANY KIND, OR FOR LOSS OF REVENUE, LOSS 
OF BUSINESS, OR OTHER FINANCIAL LOSS ARISING OUT OF OR IN 
CONNECTION WITH THE SALE, INSTALLATION, MAINTENANCE, USE, 
PERFORMANCE, FAILURE, OR INTERRUPTION OF ITS PRODUCTS, EVEN 
IF SMC OR ITS AUTHORIZED RESELLER HAS BEEN ADVISED OF THE 
POSSIBILITY OF SUCH DAMAGES. 

SOME STATES DO NOT ALLOW THE EXCLUSION OF IMPLIED 
WARRANTIES OR THE LIMITATION OF INCIDENTAL OR 
CONSEQUENTIAL DAMAGES FOR CONSUMER PRODUCTS, SO THE 
ABOVE LIMITATIONS AND EXCLUSIONS MAY NOT APPLY TO YOU. 
THIS WARRANTY GIVES YOU SPECIFIC LEGAL RIGHTS, WHICH MAY 
VARY FROM STATE TO STATE. NOTHING IN THIS WARRANTY SHALL 
BE TAKEN TO AFFECT YOUR STATUTORY RIGHTS. 

* SMC will provide warrant}' service for one year following discontinuance from the 
active SMC price list. Under the limited lifetime warranty, internal and external power 
supplies, fans, and cables are covered by a standard one-year warranty from date of 
purchase. 

SMC Networks, Inc. 
38 Tesla 
Irvine, CA 92618 
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FCC - Class B 

This equipment has been tested and found to comply with the limits for a Class B 
digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to 
provide reasonable protection against harmful interference in a residential installation. 
This equipment generates, uses and can radiate radio frequency energy and, if not 
installed and used in accordance with instructions, may cause harmful interference to 
radio communications. However, there is no guarantee that the interference will not 
occur in a particular installation. If this equipment does cause harmful interference to 
radio or television reception, which can be determined by turning the equipment off 
and on, the user is encouraged to try to correct the interference by one or more of the 
following measures: 

• Reorient the receiving antenna 

• Increase the separation between the equipment and receiver 

• Connect the equipment into an oudet on a circuit different from that to which the 
receiver is connected 

• Consult the dealer or an experienced radio/TV technician for help 

EC Conformance Declaration - Class B 

SMC contact for these products in Europe is: 
SMC Networks Europe, 
Edificio Conata II, 
Calle Fructuos Gelabert 6-8, 2 Q , 4 a , 
08970 - Sant Joan Despf, 
Barcelona, Spain. 

This information technology equipment complies with the requirements of the 
Council Directive 89/336/EEC on the Approximation of the laws of the Member 
States relating to Electromagnetic Compatibility and 73/23/EEC for electrical 
equipment used within certain voltage limits and the Amendment Directive 93/68/ 
EEC. For the evaluation of the compliance with these Directives, the following 
standards were applied: 

Limit class B according to EN 55022:1998 

Limit class A for harmonic current emission according to EN 61000-3-2/ 
1995 

Limitation of voltage fluctuation and flicker in low- voltage supply system 
according to EN 61000-3-3/1995 

Product family standard according to EN 55024:1998 



RFI * 

Emission: * 



Immunity: 
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* Electrostatic Discharge according to EN 61000-4-2:1995 (Contact Discharge: 
±4 kV, Air Discharge: ±8 kV) 

* Radio-frequency electromagnetic field according to EN 61000-4-3: 1996 (80 
- 1000MHz with 1kHz AM 80% Modulation: 3V/m) 

* Electrical fast transient/burst according to EN 61000-4-4:1995(AC/DC 
power supply: +lkV, Data/Signal lines: ±0.5kV) 

* Surge immunity test according to EN 61000-4-5:1995(AC/DC Line to Line: 
±lkV, AC/DC Line to Earth: ±2kV ) 

* Immunity to conducted disturbances, Induced bv radio-frequency fields: EN 
61000-4-6:1996(0.15 - 80MHz with 1kHz AM 80% Modulation: 3V/m) 

* Power frequency magnetic field immunity test according to EN 
61000-4-8:1993(lA/m at frequency 50Hz) 

* Voltage dips, short interruptions and voltage variations immunity test 
according to EN 61000-4-1 1:1994(>95% Reduction @10ms, 30% Reduction 
@500ms, >95% Reduction @5000ms) 

LVD: * EN60950(A1/1992; A2/1993; A3/1993; A4/1995; All/1997) 



Industry Canada - Class B 

This digital apparatus does not exceed the Class B limits for radio noise emissions from 
digital apparatus as set out in the interference-causing equipment standard entitled 
"Digital Apparatus," ICES-003 of the Department of Communications. 

Cet appareil numerique respecte les limites de bruits radioelectriques applicables aux 
appareils numeriques de Classe B prescrites dans la norme sur le materiel brouilleur: 
"Appareils Numeriques," NMB-003 edictee par le ministere des Communications. 



Japan VCCI Class B 

^fflgatt. mmmimmwwmm&±mmfam£ (vccd co^m 



Australia AS/NZS 3548 (1995) - Class B 
^^^^f ACN 069 351 613 

SMC contact for products in Australia is: 

SMC Communications Pty. Ltd. 
Suite 18, 12 Tryon Road, 
Lindfield NSW2070, 
Phone: 61-2-94160437 
Fax: 61-2-94160474 
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Safety Compliance 

Underwriters Laboratories Compliance Statement 
Important! Before making connections, make sure you have the correct cord set. 
Check it (read the label on the cable) against the following: 



Operating Voltage 


Cord Set Specifications 


120 Volts 


UL Listed/CSA Certified Cord Set 


Minimum 18 AWG 


Type SVT or SJT three conductor cord 


Maximum length of 15 feet 


Parallel blade, grounding type attachment plug rated 
15 A, 125V 


240 Volts (Europe only) 


Cord Set with H05W-F cord having three conductors 
with minimum diameter of 0.75 mm 2 


IEC-320 receptacle 


Male plug rated 10A, 250V 



The unit automatically matches the connected input voltage. Therefore, no additional 
adjustments are necessary when connecting it to any input voltage within the range 
marked on the rear panel. 

Wichtige Sicherheitshinweise (Germany) 

1 . Bitte lesen Sie diese Hinweise sorgfaltig durch. 

2. Heben Sie diese Anleitung fur den spateren Gebrauch auf. 

3. Vor jedem Reinigen ist das Gerat torn Stromnetz zu trennen. Verwenden Sie keine 
Fliissigoder Aerosolreiniger. Am besten eignet sich ein angefeuchtetes Tuch zur 
Reinigung. 

4. Die Netzanschlu Bsteckdose soli nahe dem Gerat angebracht und leicht zuganglich 
sein. 

5. Das Gerat ist vor Feuchtigkeit zu schiitzen. 

6. Bei der Aufstellung des Cerates ist auf sicheren Stand zu achten. Ein Kippen oder 
Fallen kcinnte Beschadigungen hervorrufen. 

7. Die Beluftungsoffnungen dienen der Luftzirkulation, die das Gerat vor Uberhit- 
zung schutzt. Sorgen Sie dafiir, daB diese Offnungen nicht abgedeckt werden. 

8. Beachten Sie beim Anschlufi an das Stromnetz die Anschlufiwerte. 

9. Verlegen Sie die NetzanschluBleitung so, dafS niemand daruber fallen kann. Es 
sollte auch nichts auf der Leitung abgestellt werden. 

10. AUe Hinweise und Warnungen, die sich am Gerat befinden, sind zu beachten. 
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>UANCES 



1 1 . Wird das Gerat iiber einen langeren Zeitraum nicht benutzt, sollten Sie es vom 
Stromnetz trennen. Somit wird im Falle einer Uberspannung eine Beschadigung 
vermieden. 

12. Durch die Luftungsoffnungen diirfen niemals Gegenstande oder Fliissigkeiten in 
das Gerat gelangen. Dies konnte einen Brand bzw elektrischen Schlag auslc'isen. 

13. Offnen sie niemals das Gerat. Das Gerat darf aus Griinden der elektrischen Sicher- 
heit nur von authorisiertem Servicepersonal geoffnet werden. 

14. Wenn folgende Situationen auftreten ist das Gerat vom Stromnetz zu trennen und 
von einer qualifizierten Servicestelle zu iiberpriifen: 

a. Netzkabel oder Netzstecker sind beschadigt. 

b. Fliissigkeit ist in das Gerat eingedrungen. 

c. Das Gerat war Feuchtigkeit ausgesetzt. 

d. Wenn das Gerat nicht der Bedienungsanleitung entsprechend funktioniert oder 
Sie mit Hilfe dieser Anleitung keine Verbesserung erzielen. 

e. Das Gerat ist gefallen und/oder das Gehause ist beschadigt. 

f. Wenn das Gerat deutliche Anzeichen eines Defektes aufweist. 

15. Stellen Sie sicher, da? die Stromversorgung dieses Ger%otes nach der EN 60950 
gepr ft ist. Ausgangswerte der Stromversorgung sollten die Werte von AC 7,5-8V, 
50-60Hz nicht J ber oder unterschreiten sowie den minimalen Strom von 1 A nicht 
unterschreiten.. 

Der arbeitsplatzbezogene Schalldruckpegel nach DIN 45 635 Teil 1000 betragt 70dB(A) 
oder weniger. 
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Chapter 1 
Introduction 



Congratulations on your purchase of the Barricade™ Plus Broadband 
Router with VPN. SMC is proud to provide you with a powerful yet 
simple communication device for connecting your local area network 
(LAN) to the Internet. For those who want to surf the Internet in the 
most secure way, this Broadband Router provides a convenient and 
powerful solution. 

About the Barricade Plus 

The Barricade Plus provides Internet access to multiple users by 
sharing a single-user account. The most outstanding feature of the 
Barricade Plus is its extensive firewall protection and Virtual Private 
Network (VPN) services. 

This new Barricade Plus technology provides many secure and 
cost-effective functions. It is simple to configure and can be up and 
running in minutes. 
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Features and Benefits 
Features and Benefits 

• Internet connection to xDSL or cable modem via a 10/ 100 Mbps 
WAN port 

• Local network connection via 10/100 Mbps Ethernet ports 

• DHCP for dynamic IP configuration, and DNS for domain name 
mapping 

• Firewall with Stateful Packet Inspection, client privileges, 
intrusion detection, VPN, and NAT 

• NAT also enables multi-user access with a single-user account, 
and virtual server functionality (providing protected access to 
Internet services such as Web, FTP, mail and Telnet) 

• Supports VPN (Virtual Private Network) tunneling with IPSec and 
PPTP 

• User-definable application sensing tunnel supports applications 
requiring multiple connections 

• Easy setup through a Web browser on any operating system 
that supports TCP/IP 

• Compatible with all popular Internet applications 
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Applications 

Many advanced applications are provided by the Barricade Plus, such 
as: 

• LAN Access 

The Barricade Plus provides connectivity to 10/100 Mbps 
devices, making it easy to create a network in small offices or 
homes. 

• Internet Access 

This device supports Internet access through an xDSL, or Cable 
connection. Since many DSL providers use PPPoE to establish 
communications with end users, the Barricade Plus includes a 
built-in client for this protocol, eliminating the need to install 
this service on your computer. 

• Shared IP Address 

The Barricade Plus provides Internet access for up to 253 users 
with a shared IP address. Using only one ISP account, multiple 
users on your network can browse the Web at the same time. 

• Virtual Server 

If you have a fixed IP address, you can set up the Barricade Plus 
to act as a virtual host for network address translation. Remote 
users access various services at your site using a constant IP 
address. Then, depending on the requested service (or port 
number), the Barricade Plus can route the request to the 
appropriate server (at another internal IP address). This 
secures your network from direct attack by hackers, and 
provides more flexible management by allowing you to 
change internal IP addresses without affecting outside access 
to your network. 
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DMZ Host Support 

Allows a networked computer to be fully exposed to the 
Internet. This function is used when the special application 
sensing tunnel feature is insufficient to allow an application to 
function correctly. 

• Security 

The Barricade Plus supports security features that can deny 
Internet access to specified users, or filter all requests for specific 
services the administrator does not want to serve. The Barricade 
Plus' firewall can also block common hacker attacks, including 
IP Spoofing, Land Attack, Ping of Death, IP with zero length, 
Smurf Attack, UDP port loopback, Snork Attack, TCP null 
scan, and TCP SYN flooding. 

• Stateful Packet Inspection 

Stateful Packet Inspection (SPI) is one of the firewall features 
provided by the Barricade Plus. The SPI ensures that the data coming 
into your network was requested by an end node computer on your 
network. The Barricade Plus examines the incoming data and 
compares it to a database of trusted information. As traffic leaves the 
network it is defined by certain characteristics. Incoming information 
is then compared to these sets of characteristics. If the incoming data 
matches the predefined set of characteristics the incoming traffic is 
allowed. If no match is found the incoming traffic is discarded. 

• Virtual Private Network (VPN) 

The Barricade Plus supports two of the most commonly used 
VPN protocols - PPTP and IPSec. These protocols allow remote 
users to establish a secure connection to their corporate network. 
If your service provider supports VPNs, then any of these 
protocols can be used to create an authenticated and encrypted 
tunnel for passing secure data over the Internet (i.e., a 



1-4 



Introduction 



traditionally shared data network). The VPN protocols 
supported by the Barricade Plus are briefly described below. 

• Point-to-Point Tunneling Protocol — Provides a secure tunnel 
for remote client access to a PPTP security gateway. PPTP 
includes provisions for call origination and flow control 
required by ISPs. 

• IP Security - Provides IP network-layer encryption. IPSec 
can support large encryption networks (such as the 
Internet) by using digital certificates for device 
authentication. 
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Chapter 2 
Installation 



Before installing the Barricade™ Plus Broadband Router, verify that you 
have all the items listed under "Package Contents." If any of the items are 
missing or damaged, contact your local SMC distributor. Also be sure that 
you have all the necessary cabling before installing the Barricade Plus. 
After installing the Barricade Plus, refer to the Web-based configuration 
program in Chapter 4 for information on configuring the router. 

Package Contents 

After unpacking the Barricade Plus Broadband Firewall Router, 

check the contents of the box to be sure you have received the following 

components: 

• Barricade Plus Broadband Router 

• Power adapter 12V 

• One CAT-5 Ethernet cable 

• Four rubber feet 

• CD with this User Guide and EZ 3-Click Installation Wizard 

• Quick Installation Guide 

• SMC Warranty Registration Card 

Immediately inform your dealer in the event of any incorrect, 
missing or damaged parts. If possible, please retain the carton and 
original packing materials in case there is a need to return the 
product. 
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Please fill out and return the Warranty Registration Card to SMC or 
register on SMC's Web site at www.smc.com. The Barricade Plus 
Broadband Router with VPN is covered by a limited lifetime 
warranty. 

Description of Hardware 

The Barricade Plus can be connected to the Internet or to a remote 
site using its RJ-45 WAN port. It can be connected directly to your 
PC or to a local area network using any of the Fast Ethernet LAN 
ports. 

Access speed to the Internet depends on your service type. 
Full-rate ADSL can provide up to 8 Mbps downstream and 640 
Mbps upstream. G.lite (or splitterless) ADSL provides up to 1.5 
Mbps downstream and 512 Kbps upstream. Cable modems can 
provide up to 36 Mbps downstream and 2 Mbps upstream. However, 
you should note that the actual rate provided by specific service 
providers may vary dramatically from these upper limits. 

Although access speed to the Internet is determined by the modem 
type connected to your Barricade Plus, data passing between 
devices connected to your local area network can run up to 
100 Mbps over the Fast Ethernet ports. 

The Barricade Plus includes an LED display on the front panel for 
system power and port indications that simplifies installation and 
network troubleshooting. It also provides 4 RJ-45 LAN ports on the 
front panel, as well as one RJ-45 WAN port on the rear panel. 
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• 4 RJ-45 ports for connection to a 10BASE-T/100BASE-TX 
Ethernet Local Area Network (LAN). These ports can auto- 
negotiate the operating speed to 10/100 Mbps, the mode to 
half/full duplex, and the pin signals to MDI/MDI-X (i.e., 
allowing these ports to be connected to any network device 
with straight- through cable). These ports can be connected 
directly to a PC or to a server equipped with an Ethernet 
network interface card, or to a networking device such as an 
Ethernet hub or switch. 

• One RJ-45 port for connection to an xDSL or cable modem. This 
port is fixed at 10/100 Mbps, full duplex. This port only 
supports MDI-X pin signals, so you will have to use either 
straight- through or crossover cable depending on the port type 
used on the modem. 

The following figure shows the components of the Barricade Plus: 

SMC7004FW 




Figure 2-1. Front and Rear Panels 
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Item 


Description 


Reset 
Button 


Use this button to reset the power and restore the default 
factor)' settings. 


LEDs 


Power, WAN and LAN port status indicators. 
(See Verify Port Status on page 2-9.) 


LAN 
Ports 


Fast Ethernet ports (RJ-45). Connect devices on your local 
area network to these ports (such as a PC, hub or switch). 


WAN 
Port 


WAN port (RJ-45). Connect your cable modem, xDSL 
modem, or an Ethernet router to this port. 


Power 
Inlet 


Connect the included power adapter to this inlet. 

Warning: Using the wrong type of power adapter may 
cause damage. 



System Requirements 

You must have an ISP that meets the following minimum 
requirements: 

• Internet access from your Internet Service Provider (ISP) using an 
xDSL modem, or cable modem. 

• A PC using a fixed IP address or dynamic IP address assignment 
via DHCP, as well as a gateway server address and DNS server 
address from your service provider. 

A computer equipped with a 10 Mbps, 100 Mbps, or 10/100 
Mbps Fast Ethernet card, or a USB-to- Ethernet converter. 
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• TCP/IP network protocol installed on each PC that needs to 
access the Internet. 

• A Java-enabled Web browser, such as Microsoft Internet 
Explorer 5.0 or above or Netscape Communicator 4.0 or above 
installed on one PC at your site for configuring the Barricade 
Plus. 

Connect the System 

The Barricade Plus can be positioned at any convenient location in 
your office or home. No special wiring or cooling requirements are 
needed. You should, however comply with the following 
guidelines: 

• Keep the Barricade Plus away from any heating devices. 

• Do not place the Barricade Plus in a dusty or wet environment. 

You should also remember to turn off the power, remove the power 
cord from the outlet, and keep your hands dry when you install the 
Barricade Plus. 

Basic Installation Procedure 

1 . Connect the LAN: You can connect the Barricade Plus to your 
PC, or to a hub or switch. Run Ethernet cable from one of the 
LAN ports on the front of the Barricade Plus to your computer's 
network adapter or to another network device. 

2. Connect the WAN: Prepare an Ethernet cable for connecting the 
Barricade Plus to a cable/ xDSL modem or Ethernet router. 
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3. Power on: Connect the power adapter to the Barricade Plus. 

Internet 

Internet 




SOHO Office or Residence 



Figure 2-2. Connecting the Barricade Plus 

Attach to Your Network Using Ethernet Cabling 

The 4 LAN ports on the Barricade Plus can auto-negotiate the 
connection speed to 10 Mbps Ethernet or 100 Mbps Fast Ethernet, 
as well as the transmission mode to half-duplex or full-duplex. These 
LAN ports support auto-configuration for pin signals (auto-MDI/ 
MDI-X) that allow you to use straight-through cabling for connecting 
the Barricade Plus to any network device. (See Appendix B for details 
on wiring.) 

Use twisted-pair cabling to connect any of the 4 LAN ports on the 
Barricade Plus to an Ethernet adapter on your PC. Otherwise, you 
can cascade any of LAN ports on the Barricade Plus to an Ethernet 
hub or switch, and then connect your PC or other network 
equipment to the hub or switch. When inserting an RJ-45 plug, be 
sure the tab on the plug clicks into position to ensure that it is 
properly seated. 
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Warning: Do not plug a phone jack connector into any RJ-45 port. 

This may damage the Barricade Plus. Instead, use only 
twisted-pair cables with RJ-45 connectors that conform 
with FCC standards. 

Notes: 1. Use 100-ohm shielded or unshielded twisted-pair cable 
with RJ-45 connectors for all connections. Use Category 
3, 4 or 5 for connections that operate at 10 Mbps, and 
Category 5 for connections that operate at 100 Mbps. 

2. Make sure each twisted-pair cable does not exceed 100 
meters (328 feet). 




2-7 



Installation 



Attach the Barricade Plus to the Internet 

If Internet services are provided through an xDSL or cable modem, 
use unshielded or shielded twisted-pair Ethernet cable (Category 3 or 
greater) with RJ-45 plugs to connect the broadband modem directly 
to the WAN port on the Barricade Plus. Use either straight through 
or crossover cabling depending on the port type provided by the 
modem (see Appendix B). 



Figure 2-4. Making WAN Connections 

Note: When connecting to the WAN port, use 100-ohm Category 3, 
4 or 5 shielded or unshielded twisted-pair cable with RJ-45 
connectors at both ends for all connections. 

Connecting the Power Adapter 

Plug the power adapter into the power socket on the Barricade Plus, 
and the other end into a power outlet. Check the indicator marked 
Power on the front panel to be sure it is on. If the Power indicator 
does not light up, refer to Troubleshooting in Appendix A. 



X 



DSL/Cable 
Modem W 




ISP 

(Primary) 
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Verify Port Status 

Check the power and port indicators as shown in the following table. 



LED 


Condition 


Status 


Power 
(Green) 


On 


Barricade Plus is receiving power. 


WAN 
(Green) 


On 


The WAN port has established a valid network 
connection and operates at 10 Mbps. 




Flashing 


The WAN port is transmitting or receiving 
traffic at 100 Mbps. 


Link/Act 
(Green) 


On 


The indicated LAN port has established a valid 
network connection. 




Flashing 


The indicated LAN port is transmitting or 
receiving traffic. 


10/100 
(Amber) 


On 


The indicated LAN port is operating at 100 
Mbps. 




Off 


The indicated LAN port is operating at 10 Mbps. 



2-9 



Installation 



2-10 



Chapter 3 
Configuring Client PCs 



TCP/IP Configuration 

To access the Internet through the Barricade™ Plus Broadband 
Router with VPN, you must configure the network settings of the 
computers on your LAN to use the same IP subnet as the Barricade 
Plus. The default network settings for the Barricade Plus are: 

Gateway IP Address: 192.168.2.1 
Subnet Mask: 255.255.255.0 

Note: These settings can be changed to fit your network 

requirements, but you must first configure at least one 
computer as described in Chapter 5 to access the Barricade 
Plus' Web configuration interface. (See Chapter 4 for 
information on configuring the Barricade Plus.) 

If you have not previously configured TCP/IP for your computer, 
refer to "Installing TCP/IP Protocol on Your PC" on page 5-1. 

All PCs connected to the Barricade Plus must be set to the same IP 
subnet as the Barricade Plus. The default subnet address of the 
Barricade Plus is 192.168.2.X (where X means 2—254) and the subnet 
mask is 255.255.255.0. You can set the IP address for client PCs either 
by automatically obtaining an IP address from the Barricade Plus' 
DHCP service or by manual configuration. See "Setting TCP/IP to 
Work with the Barricade Plus" on page 5-5. 
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Chapter 4 
Configuring the 
Barricade Plus 



After you have configured TCP/IP on a client computer, you can 
use a Web browser to configure the Barricade™ Plus Broadband 
Router with VPN. The Barricade Plus can be configured by any 
Java-supported browser including Internet Explorer 4.0 or above, 
or Netscape Navigator 4.0 or above. Using the Web management 
interface, you can configure the Barricade Plus and view statistics 
to monitor network activity. 



LOGIN USER PASSWORD 



Password: 



To access the Barricade Plus' 
management interface, enter the IP 
address of the Barricade Plus in your 
Web browser http://192.1 68.2.1 
Then login the Barricade Plus system 
with no password (by default, there is 
no password). 

Please type password Thank you 

Note: For some browsers it may be necessary to include ":88" after 
the management IP address. For example, 
http://192.168.2.1:88 



LOGIN I CANCEL | 
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Navigating the Web Browser Interface 



The home page displays the "Setup Wizard" and "Advanced Setup" 
options. 



File Edit View Favorites Tools Help 




Navigating the Web Browser Interface 

The Barricade Plus' management interface features a Setup Wizard and an 
Advanced Setup section. Use the Setup Wizard if you want to quickly 
setup the Barricade Plus for use with a cable modem or DSL modem. 

Advanced setup supports more advanced functions like hacker attack 
detection, IP and MAC address filtering, intrusion detection, virtual server 
setup, virtual DMZ hosts, as well as other advanced functions. 
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Making Configuration Changes 

Configurable parameters have a dialog box. Once a configuration change 
has been made on a page, be sure to click the "Apply" or "Next" button at 
the bottom of the page to enable the new setting. 

To ensure proper screen refresh after a command entry, be sure that 
Internet Explorer 5.0 is configured as follows: Under the menu "Tools/ 
Internet Options/ General/Temporary Internet Files/Settings," the setting 
for "Check for newer versions of stored pages" should be "Every visit to 
the page." 



Setup Wizard 

Broadband Type 



Select the type of broadband connection you have. 



| ft Ed. ,„ ,„„„«, ,„„!= „d, 
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Address http:/fl92.168.2.iysetjpw.stm 








d 




smct 






SGtup Wizard 







1. Broadband Type 

Specify the WAN connection type required by your Internet Service Provider Specify a Cable modem, Fixed- IP 
xDSL.orPPPoE xDSL 



<~~ ru Cable Modem 

A Cable modern requires minimal configuration. When you have set up. an account with your Cable provider, the 
: . ■ . ■ ■ . . . ■ ■ . . ■ \ ^ 

fbere is a Domain Name System (DNS) sewer that you would rather use. you need to specify the IP address. 
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Cable Modem 




Your ISP may have given you a host name. If so, enter it into this field. 

Click "Finish" to complete the setup. The Status page will open to allow 
you to view the connection status, as well as other information. See 
"Status" on page 4-43 for details. 
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Fixed-IP xDSL 



la] ^joiki 



J J 4 ^Search jFavortes .JhKory .> j J J 



Address J hctpijYlSZ.lSS 2.!/sstjpw 



SMC S 



2. IP Address Info 
8b Fixed-IP xDSL 



IP 




Gateway IP 




DNS 


n.n.n.n 


Subnet Mask 





o you by your ISP in the apipropriate fieli 




Some xDSL Internet Service Providers may assign a fixed (static) IP 
address for your gateway. If you have been provided with this information, 
choose this option and enter the assigned IP address, subnet mask, 
gateway IP, and DNS IP addresses for the Barricade. 

Click "Finish" to complete the setup. The Status page will open to allow 
you to view the connection status, as well as other information. See 
"Status" on page 4-43 for details. 
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PPPoE 



* Ed, t Vie. Farate Tool, Help 0 
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Address gS] hitp:/[L92.168.2.1/setjpw.stm 
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ffl Home 


©Logout 




2. IP Address Info 
PPPoE 




MTU: |l4E4 (1440«=MTUValue«=1492) 
n Hie Time jjj 



Enter the PPPoE user name and password assigned by your Service 
Provider. The Service Name is normally optional, but may be required by 
some service providers. 

Leave the Maximum Transmission Unit (MTU) on the default value (1454) 
unless you have a particular reason to change it. 

Enter a Maximum Idle Time (in minutes) to define a maximum period of 
time for which the Internet connection is maintained during inactivity. If 
the connection is inactive for longer than the Maximum Idle Time, it will 
be dropped. Enable the Auto-reconnect option to automatically 
re-establish the connection as soon as you attempt to access the Internet 
again. 
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Advanced Setup Menu 

Selecting the "Advanced Setup" displays the main menu on the left-hand 
side of the screen and descriptive information on the right-hand side. The 
Main Menu links are used to navigate to other menus that display 
configuration parameters and statistics. 




b- rr !»■■■—■ 



Navigating the Web Browser Interface 

The Barricade Plus' advanced management interface includes nine key 
menus - System, WAN, LAN, NAT, Firewall, VPN, SNMP, Tools, and 
Status. The System menu provides general information on the current 
settings and how to configure the Barricade Plus. The WAN, LAN, NAT, 
Firewall, VPN, and SNMP menus are used to configure the LAN and 
WAN interface, as well as other functions. While the Tools menu is used to 
backup the Barricade Plus, restore the factory settings, update the 
firmware, or reset the Barricade Plus. The Status menu is used to see the 
connection status for the Barricade Plus' WAN/LAN interfaces, firmware, 
and hardware version numbers, any illegal attempts to access your network, 
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as well as information on all DHCP client PCs currently connected on 
your network. 

Main Menu 

Using the Web management interface, you can define system parameters, 
manage and control the Barricade Plus and its ports, or monitor network 
conditions. The following table briefly describes the selections available 
from this "Advanced Setup" screen. 



Menu 


Description 


System Menu 


Configures TCP/IP settings and client services. 


Time Zone 


Sets the local time zone. 


Password Settings 


Sets the password for administrator access. 


Remote Management 


Sets the IP address for remote management 




station. 


WAN Menu 


• Specifies the Internet connection type: (1) 




Dynamic IP host configuration and the 




physical MAC address of each media 




interface, (2) PPPoE configuration, or (3) 




Static IP and gateway address. 




• Specifies DNS servers to use for domain 




name resolution. 


LAN Menu 


Sets the TCP/IP configuration of the Barricade 




Plus' LAN interface and all DHCP clients. 


NATMenu 


Configures system IP settings, including: 




• Address Mapping 




• Virtual Server 


Firewall Menu 


Configures a variety of packet filtering and 




specialized functions, including: 




• Access Control 




• URL Blocking 




• Schedule Rule 




• Intrusion Detection 




• DMZ (Demilitarized Zone) 
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Menu 


Description 


VPN Menu 


Provides three Virtual Private Network tunnels for 




secure Internet communication. 


IPsec 


Configures inbound and outbound Security 




Association (SA). 


PPTP 


• Authorizes remote users using the PPTP 




tunneling protocol. 




• Authenticates a PPTP tunnel to the destination 




host and authorizes the IP address range to 




assign to the client users. 


SNMP Menu 


Displays and modifies parameters for the 




Simnle Network MflniKTempnt Protocol 




(SNMP). 


CvOtnmumtv 


Configures the community strings authorized 




for management access. Up to 5 community 




names may be entered. 


Trap 


Specify management stations that will receive 




authentication failure messages or other 




unsolicited message from the SNMP agent. Up 




to 5 trap managers may be entered. 


Tools Menu 


Contains options to reset the system, restore 




configuration settings, or update system 




firmware. 


Configuration Tools 


Allows you to backup the system 




configurations, restore the saved backup 




configuration file, or restore all configuration 




settings to the factory defaults. 


Firmware Upgrade 


Upgrades the system with the latest firmware 




nbrinnpd from SA/TCs wphsitp at 




www.smc.com 


Reset 


Reboots the system and retains all of your 




JlLLli' L4.J_d.l_J.Wli ot_-LL_._LJ_i;_>, 


Status Menu 


Displays WAN/LAN connection status, 




firmware and hardware version numbers, as 




well as information on all DHCP client PCs 




connected 
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Description 


Help Menu 


Contains information for product support, 
troubleshooting, and network terminology. 


Home Button 


Go to the overview page of this Web 
management interface 


Logout Button 


Exit the Barricade Plus system. 



Making Configuration Changes 

Configurable parameters have a dialog box or a drop-down list. 
Once a configuration change has been made on a page, be sure to 
click the "APPLY" button at the bottom of the page to confirm 
the new settings. 

Note: To ensure proper screen refresh after a command entry, be sure 
that Internet Explorer 5.0 is configured as follows: Under the 
menu "Tools /Internet Options/General/Temporary Internet 
Files/Settings," the setting for "Check for newer versions of 
stored pages" should be "Every visit to the page." 
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System Settings 

Set Time Zone 













a 


Time Zone 






Set Time Zone 

(GMT-08:00)Pacific Tims; (US & Can 


d.),T,„ g 




~ Enable Daylight Savings 






Start Daylight Savings Time |jan 


* Mb J 


ft 


End Daylight Savings Time | Jan 


»? ill! d 


|«D... 







Set the time zone for the Barricade Plus. This information is used for log 
entries and client filtering. 
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Setting a Password 

If this is your first time to access the Barricade Plus, you should define a 
new password, record it and put it in a safe place. From the "Advanced 
Setup" menu, select "System" and click on "Password Settings" and follow 
the instructions on the screen. 




Use this menu to restrict management access based on a specific password. 
Anyone can access the "Setup Wizard," "Advanced Setup" and Help 
menus, but you must enter a password to access the configuration options 
provided by the "Setup Wizard" and "Advanced Setup" menus. By default, 
there is no password, so please assign a password to the Barricade Plus as 
soon as possible, and store it in a safe place. 

Passwords can contain from 3—12 alphanumeric characters, and are 
case-sensitive. 

Note: If your password is lost, or you cannot gain access to the 

management interface, press the Reset button on the front panel 
(holding it down for at least five seconds) to restore the factory 
defaults. 
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Remote Management 



s 








"'<" Advanced Setups 





Remote Management 

Settlie remote maneoernent of The Barricade Plue 




J] Dm 



"rrt«T, 



By default, management access is only available to users on your local 
network. However, you can also manage the Barricade Plus from a remote 
host by adding the IP address of an administrator to this screen. 

Note: If you specify an IP address of 0.0.0.0, any host can manage the 

Barricade Plus. You can also manage the Barricade from a remote 
host by typing "http://l 92.1 68.2.1:8080" in the "Address" field of 
your Web browser. 
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Network Settings 

You can use the "Setup Wizard" to change the required settings, or you 
can select the basic configuration items you need to change from the 
"Setup Wizard" screen. (Refer to Quick Installation Guide for configuring 
basic settings using the "Setup Wizard".) 

Use the "Advanced Setup" menu to configure the WAN connection 
options, the LAN interface (including TCP/IP parameters for the 
Barricade Plus' gateway address, DHCP address pool for dynamic client 
address allocation), and other advanced services. 

WAN Configuration 

Specify the WAN connection type required by your Internet Service 
Provider, then click "More Configuration" to provide detailed 
configuration parameters for the selected connection type. 




fid 

lec- mil" 4 

Specify one of the first three options to configure a WAN connection 
through the RJ-45 port (i.e., a connection to an xDSL modem or cable 
modem). 
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Dynamic IP Address - DHCP 



Advanced Setupf 



Dynamic IP 



The Host Nan 
WAN's pliysi( 



SNMP 

■ Tools 
- Status 



optional, bo! may be required by eome S 
terfece on the Barricade Plue If required 
copy ibe MAC addreee of the Network Ir 
thie MAC addrees If neceseary you car 



|CI0 -\M -|EE -|2E - EF 

Clone MacAddre S s | 



; The default MAC a 



.ne MAC 
roe the WAN 



-rrie^ 



The Host Name is optional, but may be required by some ISPs. 
The default MAC address is set to the WAN's physical interface on 
the Barricade Plus. Use this address when registering for Internet 
service, and do not change it unless required by your ISP. You can 
use the "Clone MAC Address" button to copy the MAC address of 
the Ethernet Card installed by your ISP (in your PC) and replace 
the WAN MAC address with this MAC address. 
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PPP over Ethernet - PPPoE 




Advanced Setup] 



Enterthe PPPoE u: 
optional, out may bf 
■. ■ . . 

for longer than the Maximum Idle Time, ftsrt B 



ed during inactivity It trie connection 'is 
;an enable the Auto-reconnect option tc 
access the Internei again. 



If your Internet SeRiee Prtffltlsr requires- 1 he ase of PPPoE, enter the inforir 




MTU: (1440<=MTU Value<=1492) 

Maximum Idle Time pj~Q 



Enter the PPPoE user name and password assigned by your ISP. 
The Service Name is normally optional, but may be required by 
some providers. 

Specify the value of MTU (Maximum Transmission Unit) for proper 
Internet access such as browsing web sites and using E-mail. 
(Default: 1454) 



Enter the maximum idle time for the Barricade Plus (in seconds). 
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Static IP Address - Fixed IP 



»^^^^^^^^^^^^^^^^^^^^ Arivanced Setup] 

I Static IP 

C Dynamic IP 




If your Internet Service Provider has assigned a fixed address, 
enter the assigned address and Subnet Mask for the Barricade Plus, 
then enter the gateway address of your ISP. 

Note: You may need a fixed address if you want to provide Internet 
services, such as a Web server or FTP server. 
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DNS Configuration 








Advanced Setup 








DNS 


P. Dynamic IP 
P PPPDE 
P Static IP 
P 

O 


A Domain Name System (DNS) server is like an index at IP addresses and Web addresses. If yau type a 
Wet address into your browser, such as VMW.smc.com, a DNS sewer will find that name in its index and find 
the matching IP address: 202 42.118.226. Most ISPs provide a DNS sewer far speed and convenience. Since 
your Service Provider may connect to the Internet with dynamic IP settings, it is likely that the DNS server IPs 
are also provided dynamically However, it there is a DNS sewer that you would rather use. you need to 
specify the IP address here. 

Has your Internet sen/ice provider given you a DNS address? 




Secondary DNS Address (optional) : [ii .[ii .|o fa 

jj^jjfr ^Pjl 




| | l.lntarnat 



Domain Name Servers are used to map an IP address to the equivalent 
domain name (e.g., www.smc.com). Your ISP should provide the IP 
address for one or more domain name servers. Enter those addresses 
on this screen. 
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LAN Gateway and DHCP Settings 




gJiava^npt^ocumenLform^Ol resetOiiavascnpbdocument.form^ll.re^tO | | |» Internet 



Configure the gateway address of the Barricade Plus. To 
dynamically assign the IP address for client PCs, enable the DHCP 
Server, set the lease time, and then specify the address range. Also 
remember to configure all of your client PCs for dynamic address 
allocation. 

Valid IP addresses consist of four numbers, and are separated by 
periods. The first three fields are the network portion, and can be 
from 0—255, while the last field is the host portion and can be from 
1—254. However, remember not to include the gateway address of 
the Barricade Plus in the client address pool. If you change the 
pool range, make sure the first three octets match the gateway's IP 
address, i.e., 192.168.2.xxx. 

Note: Verify that your IP address pool is from 192.168.2.2 to 

192.168.2.255, your Subnet Mask is 255.255.255.0 and your 
Default Gateway is 192.168.2.1. 
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Configuring Client Services 

The Barricade Plus includes a broad range of client services, including 
firewall protection, VPN tunneling , network address translation, 
virtual server, address mapping, DMZ, and restricted Internet access 
for specified clients. You can configure these functions by 
selecting specific items from the menu on the left of the screen. 

NAT - Network Address Translation 
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Some applications require multiple connections, such as Internet 
gaming, videoconferencing, Internet telephony and others. These 
applications may not work when Network Address Translation 
(NAT) is enabled. If you need to run applications that require 
multiple connections, use the following screen to specify the 
additional public ports to be opened for each application. 
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Address Mapping 




Use the "Address Mapping" option to limit the number of public IP 
addresses required from the ISP and maintain the privacy and security of 
the local network. 
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Virtual Server 




If you configure the Barricade Plus as a virtual server, remote users 
accessing services such as Web or FTP at your local site via public 
IP addresses can be automatically redirected to local servers 
configured with private IP addresses. In other words, depending 
on the requested service (TCP/UDP port number), the Barricade 
Plus redirects the external service request to the appropriate server 
(located at another internal IP address). 

The WAN interface must have a fixed IP address to utilize this 
function. For example, if you set Type/Public Port to TCP/80 
(HTTP or Web) and the Private IP/Port to 192.168.2.2/80, then all 
HTTP request from outside users will be transferred to 192.168.2.2. 
Therefore, by just entering the IP Address provided by the ISP, 
Internet users can access the service they need at the local address 
to which you redirect them. 



4-22 



Configuring the Barricade Plus 



Some of the more common TCP service ports include: 
HTTP: 80, FTP: 21, Telnet: 23 and POP3: 110. 

Firewall Protection 







□ 
□ 
o 


Security Settings (Firewall) 




: !.■■:;■■;,■■ ■ . ■ ■ ; ■ ■ . - : 


[■Access Control 
Schedule Rule 

J • 


for applications t hat require unrestricted access to the Internet, you can configure a specific 
dieni/sereeras a demilitarized ;or,e (DMZ). 

Enable or disable Firewall module function: ; * Enable Disable 


fettone 


1 1 * 



The Barricade Plus' firewall can provide the access control of 
connected client PCs, block common hacker attacks, including IP 
Spoofing, Land Attack, Ping of Death, IP with zero length, Smurf 
Attack, UDP port loopback, Snork Attack, TCP null scan, and TCP 
SYN flooding. The firewall does not significantly affect system 
performance, so we advise leaving it enabled to protect your network 
users. 

Note: When you select the "Enable" radio button of the "Enable or 
disable Firewall module function" field, be sure press the 
"APPLY" button. 
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Access Control 



Advanced Setupf 



i:-URL Blacking 

i.- Schedule Rule 
Hntmsion Detection 

i'DMZ 



Access Control 



i Enable Filtering Function : ff Yes f No 



' Normal Filtering Table (up to 10 computers) 




Client PC 


Client PC IP Address 


Client Service 


Schedule Rule 


Configure | 


Test 1 


192.168.2.2-100 


WWW, WWW with URL Blocking, Mews Forums 


Always Blocking 


Edit Delete 



^ Arid PC ^ 



> MAC Filtering Table (up to 32 computers) 



I* 
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Using this option allows you to specify different privileges for the client 
PCs. 



The following items are included in the "Access Control" screen: 



Field 


Description 


Normal Filtering Table 


Displays the IP address and filtering status of 




the connected client PC 


MAC Filtering Table 


Displays the MAC address of the client PC 


Remote Management 


Allows you to set the IP address of an 




administrator for a remote management 



Note: Click on "Add PC" and define the appropriate settings for 
client PC services (as shown in the following screen). 
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Access Control Add PC 

This page allows users to deilne service limitation of clieni PC, including IP address, service type and scheduling rule 
URL blocking function, you need config URL address first in "URL Blocking Site" page For scheduling function, you a 
schedule rule first in "Schedule Rule" page 

• Client PC Description: |Test 

• ClientPCIP Address: 192. 168.2. fi~ ~ [kT 



. CliGiitPCSer 



WWW 


HTTP. TCP Port 80. 3128, 8000 , 8080 , 8081 


Is? 


WWW with URL Blocking 


HTTP (Ref. URL Blocking Site Page) 


m 


E-mail Sending 


SMTP, TCP Port 25 


□ 


News Forums 


NNTP.TCP Port 119 


m 


E-mail Receiving 


POP3, TCP Part 110 


n 


Secure HTTP 


HHPS, TCP Port 443 


m 


File Transfer 


FTP, TCP Port 21 


□ 


MSN Messenger 


TCP Port 1863 


□ 


Telnet Service 


TCP Port 23 


□ 




AOL Instant Messenger, TCP Port 5190 




NetMeeting 


H.323, TCP Port 1720 


□ 


DNS 


UDP Port 53 


F 


SNMP 


UDP Port 161. 162 




VPN-PPTP 


TCP Port 1723 


□ 


VPN-L2TP 


UDP Port 1701 


r 


TCP 


All TCP Port 


□ 


UDP 


All UDP Port 


□ 


Protocol: rrcp <~ UDP 






Port Range: fo : ~[o , [o 


~[d , [d ~[d , [d , [o ~[d 





ie (in liny Rule iRel. Schedule R; Always Slocking * 

| OK | CancGl | 
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URL Blocking Sites 



Advanced Setup] 



... 

[■Access Control 

["Intrusion Detec 
LDMZ 

o 




■ $NMP 




■ Tools 




■ Status 





URL Blocking 

Disallowed Web Sites and Keywords. 

You can block access to certain Web sites from a rjariicular PC by entering either a full URL address or just a keyword of the Web site. 

To specify trie particular PC, go back to the "Access Control" page and etrsck the baj. fat "Hftp wilii URL Blocking" in Ifrs "Normal Filtering Table" 




Rule Number 


URL / Keyword 


Rule Number 


URL / Keyword 


Site 1 


Site 16 




Site 2 




Site 17 




Site 3 




Site 18 




Site 4 




Site 19 




Site 5 




Site 20 




Site 13 




Site 21 




Site 7 


Site 22 




Site 8 


Site 23 


I I 


Site 9 


Site 24 


I I 


Site 10 


Site 25 




Site 11 


Site 2B 




Site 12 




Site 27 




Site 13 




Site 28 




Site 14 


Site 29 




Site 15 | 


Site 30 





-rris^ 



Using the above screen to block access to the Web sites specified 
in the table. 
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Schedule Rule 



Advanced Setupf 



Schedule Rule 

page. 

> Schedule Rule Table (up to 10 rules) 



Edit Delete 



- TOOlS 
■ Status 

n 



Mil Schedule Rule 



S] Done 



~rrn 



You can filter Internet access for local clients based on the "Rule 
Name," and time of day. 

1 . Click on "Add Schedule Rule" 

2. Define the appropriate settings for a schedule rule (as shown 
in the following screen). 



4-27 



Configuring Client Services 



3. Click "OK" and then the "APPLY" button to save your settings, 
(as shown on previous page) 



smct 


- 1 







Edit Schedule Rule 

Name: |Office PC 



Activate Time Period: 



Week Day 


Start Tim 


(ft mm) 


End Tirne 
(hh:mm) 


Every Dsy 


[Ff 


[oF 


no 


[Ff 


Sunday 


[qo~| 


foe | 


[qo~| 


fFf 


Monday 


[P8~| 


[dF| 


in 


[dF 


Tuesday 


[ci~| 


[Ff 


m 


[Ff 


Wednesday 


[06~| 


[iiFi 


m 


[Ff 


Thursday 


[cs~| 


|ddJ 


na 


[dF 




[Ff 


[Ff 




[FT| 


Saturday 


[0u~| 


[qc~| 


[qo~| 


fFf 



OK | Cancel | 



~rrr< 



■ Tools 

■ Status 




ICjI^I 
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Intrusion Detection 




Advanced Setupf 



Ping of Death, IP with zero length, Smuif Attack. UDP port I 




hackers attempt to 

l-rnail Address :| 



SMTP 
POPi Serve 




il incomplete TCP/UDP sessions HIGH: |300 
il incomplete TCP/UDP sessions LOW- |250 
implete TCP/UDP sessions (per min) HIGH: |?50 
implete TCP/UDP sessions (per min) LOW. |200 
drnurr, incomplete TCP/UDP sessions number frorr 
implete TCP/UDP sessions detect sensitive time p 



<H liit 

The Intrusion Detection feature of the Barricade Plus limits the access of 
the incoming traffic from the WAN port. When the SPI feature is turned 
on, all the incoming packets will be blocked unless certain types of traffic 
types are checked by r the users. When the user checkes certain types of 
traffic, only the particular type of traffic initiated from the Internal LAN 
will be allowed. For example, if the user only checks "FTP service" from 
the Stateful Packet Inspection page, all the incoming traffic will be blocked 
except the FTP connection initiated from the local LAN. 
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• Stateful Packet Inspection 

This option allows you to select different application types that are 
using dynamic port numbers. If you need to use the Stateful 
Packet Inspection (SPI) for blocking packets, click on the "Yes" 
radio button in the "Enable SPI and Anti-DoS firewall protection" 
field and then check the inspection type that you need, such as 
Packet Fragmentation, TCP Connection, UDP Session, FTP Service, 
H.323 Service and TFTP Service. 

• Hacker Prevention Feature 

The Barricade Plus' firewall inspects packets at the application 
layer, and maintains TCP and UDP session information, including 
timeouts and number of active sessions, provides the ability to 
detect and prevent certain types of network attacks such as DoS 
attacks. 

Network attacks that deny access to a network device are called 
denial-of-service (DoS) attacks. Denials of Service (DoS) attacks are aimed 
at devices and networks with a connection to the Internet. Their goal is 
not to steal information, but to disable a device or network so users no 
longer have access to network resource. 

By using the above inspected information and timeout/ threshold critieria, 
the Barricade Plus provides the following DoS attack preventions: Ping of 
Death (Ping flood) attack, SYN flood attack, IP fragment attack (Teardrop 
Attack), Brute-force attack, Land Attack, IP Spoofing attack, IP with zero 
length, TCP null scan (Port Scan Attack), UDP port loopback, Snork 
Attack etc.. 

Note: The firewall does not significantly affect system performance, so 
we advise enabling the prevention features to protect your network 
users. 

• When hackers attempt to enter your network, we can alert you 
by e-mail 
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Enter your E-mail address for alerting hacker access. 
Specify your E-mail servers, user name and password. 

Connection Policy 

Enter the appropriate values for TCP/UDP sessions 
DoS Criteria and Port Scan Criteria 

Setup DoS and port scan criteria in the spaces provided. 



'ari^ed Zone) 




Advanced Setupf 



DMZ(Demilitarized Zone) 



Enable DMZ: f Yes « No 



tfuttiple PCs can be a* 
;cnferencing cr VPN ci 



Public IP Addre 

1. 10 1 2887 



it PC IP Addre 

.1683 Jo 
1S8.2.|c 
168.2.|o 

ies.2.|o 

1S8.2.|c 
168.2.|o 

ies.2.|o 

1S8.2.|c 



If you have a client PC that cannot run an Internet application 
properly from behind the firewall, then you can open the client up 
to unrestricted two-way Internet access. Enter the IP address of a 
DMZ host to this screen. Adding a client to the DMZ (Demilitarized 
Zone) may expose your local network to a variety of security risks, 
so only use this option as a last resort. 
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Virtual Private Networks (VPN) Tunnel 




la pm. rn»»i 



VPN provides a flexible and secure network to the authenticate users 
through IPsec (IP Security) and PPTP (Point-to-Point Tunneling Protocol) 
sessions. 
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IPsec 



IPsec is a set of protocols that offers more secure security services in the 
extranet VPNs. 



On the IPsec screen, select "Yes" in the "Enable IPsec" field for using the 
IPsec service, and choose the appropriate tunnel (Tunnel 1 - 3) as required. 

Then you have to define the authentication algorithms of the Security 
Association (SA) by entering appropriate values in the "Inbound SA" and 
"Outbound SA" fields for using IPsec security control. 

Notes: 1. Besure the two sides of the VPN tunnel have the same security 
information. 

2. Provide the "Remote IP Address" to remotely log on the 
network. 



smc @ 



Advanced Setupf 



s inbourii^/outbojndSeeuntyAssocration (SA). 



eludes the setting far bath 



n 



Enable IPsec: 


P Ye 


r No 


Tunnel: 


Turin 


iijg 


Tunnel Enable : 




2 I 

3 I 


Inbound SA 




as Outbound SA ) 


SPI; 


|2E6 




Local IP Address; 


|1S2 


|l 63 [i . |o 


Subnet Mask: 


[255 


255 |255 |o 


Remote IP Address- 


|1S2 


163 p . Jo 


Subnet Mask: 


\zm 


|2E5 |2E5 [o 


Security Gateway: 


|lSZ 


168 [l . |100 


Hash Algorithm; 


r 


e « MD5(32 character) ,r SHA1 (40 character) 


|1 


Encrypt Algorithm: 


r 


e l r 3DES_CBC(48 character) t~ DES_CBC(16 



|0l23<l5673tobcd s 
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PPTP 



Point-to-Point Tunneling Protocol (PPTP) allows the secure remote access 
over the Internet by simply dialing in a local point provided by an ISP. The 
following screen display the account information of the authorized remote 
users and the IP address range to assign to those users. 



_ 



Advanced Setupf 




Click "Edit" on the screen to setup a PPTP session. 
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PPTP User ID Setting 



U.ernsms: 




password: 




Idle Time Out: 


||!S (Mm) 


IP: 




Subnet Mask: 
Gateway IP 


|T— F~ [5 R— 


Client Setting: 


17 pptp client 
Phost 

F auto reconnect 



I OK | Cancel | 



Using the above screen allows client PCs to establish a normal PPTP 
session and provides hassle-free configuration of the PPTP client on each 
client PC. 
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SNMP 

Use the SNMP configuration screen to display and modify 
parameters for the Simple Network Management Protocol (SNMP). 
A computer attached to the network, called a Network Management 
Station (NMS), can be used to access this information. Access rights 
to the agent are controlled by community strings. To communicate 
with the Barricade Plus, the NMS must first submit a valid 
community string for authentication. The options for configuring 
community strings and related trap functions are described in the 
following sections. 



smct 




i 


SNMP Setting 


O 




O 


The Barricade Plus provides SNMP settings for eommuniiy and Irap infarmation. 


o 








1 Ccmmunit/ 












I'd 






rrff»- 
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Community 




Advanced Setup] 



SNMP Community 

In the conies! of SNMP. a relationship between an agent and a set of SNMP managei 

agent The agent establishes one corn munity for each desired combination of 
authentic at 10 ri, access control, and prosy characteristics. Each community is given a 
unique (within this agent) community name, and the msiTagem'ent stations within that 
community are provided Wfthstid must employ the community name in all get operatii 
The agent may establish a number of communities, with overlapping management sia 
membership. 




Community: A community name authorized for management 
access. 

Access: Management access is restricted to Read only or Read/ 

Write. 

Valid: Sets administrative status of entry to enabled or 

disabled. 



Note: Up to 5 community names may be entered. 
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Trap 




IP Address: IP address of the trap manager. 



Community: A community specified for trap management. 

Version: Sets trap status of entry to disabled, or enabled with 

VI or V2c. 
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Tools 



You can use the "Tools" menu to restore factory settings, update 
firmware, or reboot the Barricade Plus. 



smc @ 




Tools Settings 



at,,, 
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Configuration Tools 




t~ Restore to Factory Defaults 

More Configuration | 




The "Backup" option allows you to save your Barricade Plus' 
configuration to a file named config.bin on your PC. You can then click on 
the "Restore" radio button to restore the saved backup configuration file. 
Selecting the "Restore to Factory Defaults" can restore the factory 
settings. 
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Barricade Plus 



Firmware Upgrade 



........ 






Firmware Upgrade 


■ WAN 

■ LAN 


HsW 

Bun 

a 


This tool allows you to upgrade the EarfieS'fie Plus system Hrrriware using a tile provided by 
SMC. 

Enter the path and name of the upgrade Pie then click the APPLY button below. You will be 
prompter! to confirm ilie upgrade. 






Upgrade Target | Firmware z] 




Brows g... | 


fet> 0 ns 


I | |« inharnat J 



Use this screen to update the latest firmware using a file provided by SMC. 

Note: For latest firmware version information, visit SMC's Web site at 
http:/ / www.smc.com 
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Reset 






Ni-l»cils 


Advanced Setups 




Reset 

In the event that the system stops responding correctly or in some way stops 
■ 






l> ConfiauratiDn Tools 
I- Firmware Upgrade 


^■jCv 


Q 


ffiffl ^ffi? IfflMj' 


k 






1 1 |» Internet A 



If the Barricade Plus stops responding, you can click on the "Apply" 
button to refresh the gateway. The saved configurations of the Barricade 
Plus will not be changed back to factory default settings after resetting the 
gateway. 

Note: If you use the reset button on the front panel, the Barricade Plus 
performs a power reset and restores the factory settings. 
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Status 

You can use the following screen to display WAN/LAN connection status, 
firmware and hardware version numbers, as well as information on all 
DHCP clients connected to your network. 



SMcr 



Advanced Setupf 



■ ■■ ■ ■ 



jr network, as well as informatior 



inected to your network. 



•: 05/20/2002 17:04:4 



INTERNET 

Cable/DSL CONNECTED 
WAN IP: 10.1 .28.37 
Subnet Mask: 256.255.252.0 
Gateway: 10.1 .28.254 
Primary DNS: 10.2.3.4 
Secondary DNS: 0.0.0.0 



GATEWAY 

IP Address: 192,168.2.1 
Subnet Mask: 255.255.255.0 
DHCP Server: Enabled 
Firewall: Enabled 
IPSec- Disabled 
PPTP Client: 



INFORMATION 

Numbers of DHCP Clients: 1 
Runtime Code Version: 

1,00 (May 15 2002 17:25:05) 
Boot CodeVersion: V2.00 
LAN MAC Address: 

00-04E2-2E-EF-BA 
WAN MAC Address: 

00-04-E2-2E-EF-BB 
Hardware Version: 01 
Serial Nunr. A14G0.34362 




DHCP Client Log 

s to your View information on LAN DHCP c 
Barricade Plus. 



00 192. 168. J 

19 HTP Date, 
10 I>HCP Clie 
10 I>HCP Clie 
10 I>HCP Clie 
10 I>HCP Clie 
00 I>HCP Clie 




"rria 
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The following items are included in this screen: 



Field 


Description 


INTERNET 


Displays WAN connection type and status. 


GATEWAY 


Displays system IP settings, as well as DHCP, 




NAT, PPTP Client and PPTP Server Firewall. 


INFORMATION 


Displays the number of attached clients, the 




firmware versions, the physical MAC address 




for each media interface, as well as the 




hardware version and serial number. 


Release 


Click on this button to disconnect from the 




Internet. 


Renew 


Click on this button to reconnect to the 




Internet via cable/DSL modem. 


Security Log 


Displays any illegal attempts to access your 




network. 


DHCP Client Log 


Displays information on all DHCP clients on 




your network. 
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Configuring Client 



If you have not previously installed the TCP/IP protocol on your 
client PCs, refer to the following section. If you need information on 
how to configure a TCP/IP address on a PC, refer to "Setting TCP/ 
IP to Work with the Barricade Plus" on page 5-5. 



Installing TCP/IP Protocol on Your PC 



The following procedures uses Windows 98 as an example. The 
procedure for other Windows systems may be similar but not 
identical. If you are using another Windows system, refer to the 
on-line help for advice. 



1. Click the "Start" button and choose "Settings," then click 
"Control Panel." 

2. Double click the "Network" icon and select the "Configuration" 
tab in the Network window. 

3. Click the "Add" button to add the network component to your 




Windows 95/98/ME 



PC. 
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4. Double click "Protocol" to add the TCP/IP protocol. 



Select Network Component Type 




Click the type oi network component you want to install: 






5 Client 
Adapter 


Add. 




* protocol 


Cancel 


■ 






Protocol is a language' a computer uses. Computers 
must use the same protocol to communicate. 









5. Select the "Microsoft" item in the manufacturers list. And choose 
"TCP/IP" in the Network Protocols. Click the "OK" button to 
return to the Network window. 



Select Network Pintor.nl 



Click, the Network Protocol thai; you want to install then click OK... If you have 

.'!' an installation disk for this device, click Have Disk 



Network Protocols: 



S™ B anyan 




T~ Fast Infrared Protocol 








^IFWSF^-compatible Protocol 








^Microsoft 32-bit DLC 




~T Novell 




^"Microsoft DLC 








¥™ NetBEUI 





6. The TCP/IP protocol will be listed in the Network window. 

Click "OK" to complete the install procedure and restart your PC 
to enable the TCP/IP protocol. 
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Windows 2000 



1. Click the "Start" button and choose "Settings," then click 
"Control Panel." 

2. Double click the "Network and Dial-up Connections" icon, then 
"Local Area Connection" icon, and press the "Properties" button 
in the "General" tab. 



3. Click the "install..." button to add the network component to 
your PC. 

4. Double click on "Protocol" to add the TCP/IP protocol. 



Select Network Component Type 



Click the type of network component you want to install: 



3 Client 
Service 



A protocol is a language ycnir computer uses to 
communicate with other computers. 



Installing TCP/IP Protocol on Your PC 



5. Choose "Internet Protocol (TCP/IP)" in the Network Protocols. 
Click the "OK" button to return to the Network window. 



ill 



Click the Network Protocol that you want to install, then click DK.. It yew have 
an installation disk for this component, click Have Disk. 



Network Protocol: 



Apple!" alk Protocol 




DLC Protocol 




1 1 [TCP/IP] ^^^^^^^H 




Network Monitor Driver 




Have Disk ... 



I Cancel | 



6. The TCP/IP protocol will be listed in the Network window. 
Click "OK" to complete the install procedure. 
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Setting TCP/IP to Work with the Barricade 
Plus 

Windows 95/98/ME 

1. Click the "Start" button and choose "Settings," then click 
"Control Panel." 

2. Double click the "Network" icon. Select the TCP/IP line that has 
been assigned to your network card in the "Configuration" tab of 
the Network window. 



3. Click the "Properties" button to set the TCP/IP protocol for the 
Barricade Plus. 



Configuration | Identification | Access Control | 
The following network components are installed: 



^"NetBEUI -) SMC2E6JWAR EZ Connect 11 MbpsWireler_^J 
T TCP/IP-? Dial-UpAdapter \\ 



'^TCP/IP -> SMC2GE»/-AP EZ Connect 11 Mbps Wireless I 

^iFile and printer sharing for Microsoft Networks ' 



Properties 



Primary Netwerk Lpggn: 




TCP/IP is the protocol you use to connect to the Internet and 
wide-area networks. 



4. You can dynamically assign TCP/IP address settings to a client, 
or you can manually configure a client with address settings to 
meet your specific network requirements. (Note that the default 
IP address of the Barricade Plus is 192.168.2.1.) 
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Windows 2000 



1. Click the "Start" button and choose "Settings," then click 
"Control Panel." 

2. Double click the "Network and Dial-up Connections" icon, then 
"Local Area Connection" icon, and press the "Properties" button 
in the "General" tab. 



3. Select the TCP/IP line that has been assigned to your network 
card in the "Local Area Connection Properties" window. 

4. Click the "Properties" button to set the TCP/IP protocol for the 
Barricade Plus. 

mnmsmmm 

General | Sharing | 
Connect using: 



SMCEZ Card 10/1 00 (SMC1211TXI 



Components checked are used by this connection: 



Configure | 



s^lFile and Printer Sharing for Microsoft Networks 

«< TjHHilBnHEI 

01"NelBEUI Protocol 
BfNWLink NetBIOS 



Properties 



Transmission Control Frotccoi/lnte ; nei Protocol. Tho doloult 
rvide area network protocol that provides communication 
across diverse interconnected networks 



I S how icon in taskbar when connected 



DK Cancel 



5. You can dynamically assign TCP/IP address settings to a client, 
or you can manually configure a client with address settings to 
meet your specific network requirements. (Note that the default 
IP address of the Barricade Plus is 192.168.2.1.) 
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Windows XP 

1. Click the "start" button and choose "Control Panel." 

2. Select the "Network and Internet Connections" icon, 
then click the "Network Connections" icon, and double 
click on the "LAN or High-Speed Internet." 

3. Press the "Properties" button in the "General" tab. 

4. Select the TCP/IP line that has been assigned to your network 
card in the "Local Area Connection Properties" window. 

5. Click the "Properties" button to set the TCP/IP protocol for the 
Barricade Plus. 



4- Local Area. Connection 1 Properties 



General Authentication Advanced 
Connect using. 



PRISM25 IEEE S(X> 11 PC Card 



Con fig li re. 



T his connection uses, the following iiems: 



^ Client for Microsoft Networks 

J§ File and Printer Sharing for Microsoft Networks 
0 J§j Qo5 Packet Scheduler 
0 ^jp- 



Internet Protocol (TCP/IP) 



Install... 



Unin stall 



Properties 
Description 

Transmission Control Protocol/Internet Protocol. The default 
vvids- are= network protocol that provides communication 
across diverse interconnected networks. 



I I Show icon in notification area when connected 



You can dynamically assign TCP/IP address settings to a client, 
or you can manually configure a client with address settings to 
meet your specific network requirements. (Note that the default 
IP address of the Barricade Plus is 192.168.2.1.) 
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Configuring Your Computer with Windows 95/98/ME 

You may find that the instructions here do not exactly match your 
version of Windows. This is because these steps and screenshots were 
created from Windows 98. Windows 95 and Windows Millennium 
Edition are very similar, but not identical, to Windows 98. 



Step 1. Configure TCP/IP Settings 

After you have completed the hardware setup by connecting your 
devices, you need to configure your computer to connect to your 
Barricade Plus. You need to determine how your ISP issues your IP 
address. Many ISPs issue these numbers automatically using a 
networking technology known as Dynamic Host Configuration 
Protocol, or DHCP. Other ISPs will specify your IP address and 
associated numbers, which you must enter manually. This is also 
known as a static IP address. How your ISP assigns your IP address 
determines how you will configure your computer. 



1. From the Windows 

desktop, click the "Start" 
button. Choose "Settings," 
then click "Control Panel." 



Windows Updale 




[f^j Programs *■ 
Favorites ► 
Cjn currents ► 


f|j^ Settings ► 


Control Panel 


Printers 
^ laskbarf. Start Menu... 
iij Folder Options... 
^| Active Desktop ► 


eg ew 

# Help 


^ Windows Update... 


Log Off Administrator... 
Shut Down... 
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From "Control 
Panel," double-click 
the "Network" icon. 





Favorites Help 






. S3 la fc 

Up Map Drive Disconnect 


if l a 

Cut Copy Paste 







Accessibility Add New Adc7Remcve Date/Time 



3. In the "Network" 
window, under the 
"Configuration" tab, 
double-click the "TCP/IP 
entry that is listed with 
your network card. 




Configuration 1 1 tier; dicker ) Access Control | 
The f olio win g network components are installed: 



_J Client loi Microsoft Networks 
B Microsoft Family Logon 
Dial-Up Adapter 

SMCEZ Card 1 0^1 00 [SHC1211TX) 
•j~TCP/IP-> Dial-Up Adapter 



Primary Network Logon: 

| Cfe't ioi Microsoft f Jeiwoii*s 

File and Print Sharing. .. j 



TCP'IP is the protocol you use io connect to the Internet and 
wide- area networks. 
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4. Select the "IP Address" tab. 

If "Obtain an IP address 
automatically" is already 
selected, your computer is 
already configured for DHCP. 
Click "Cancel" to close each 
window, and skip to Step 2 
"Disable HTTP Proxy." 



TCP/IP Pioperties HQ 



Bindings [ Advanced j NetBIOS 
DNS Configuration | Gateway | WINS Configuration IP Address 

An iP address can be i <{ e 

II your network does not automaticallji assign IP addresses, ask 
j'olji network sdminislrstoi for an address, and then toe it in 
the space below. 



ML m j i IF i rid II 




Locate your IP address and 
Subnet Mask. Record them 
in the spaces provided 
below. 



6. Click the "Gateway" tab and 
record the numbers listed 
under "Installed gateways." 



Bindings | Advanced j NetBIOS 
DNS Configuration Gateway | WINS Configuration | IPAddress 

r hi til t gateway in Insl illi ■ i 1 ■:. .:. w> ,:: li: 1 will be the d slault. 

The addr^;;i o!fe< in the list will be the oider in which these 
machines are used. 



H ew gateway: 



Installed gateways: 

Remove I 



OK Cancel 
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7. Click the "DNS 
Configuration" tab. Locate 
the DNS servers listed under 
"DNS Server Search Order." 
Record the listed addresses. 

8. After writing down your 
settings, check to make sure 
you have recorded them 
correctly. Click the "IP 
Address" tab and then click 
"Obtain an IP address 
automatically." Click OK. 



Bindings ] Advanced j NetBIOS 
DNS Configuration j Gateway | WINS Conligoration | PAddrr 

^ ppatle DNS 
<~ Enable DNS 



DNS Server Search Llrdei 



D -™*T 



I Domain Suffix Search Order 



OK Cancel 



System Settings Change 



Yt i Ii i lore Ihe ne 1 /' sellings will lake eflecl 

D o you want to restartyour computer now? 



9. Windows may need 
your Windows 95/98/ 
ME CD to copy some 
files. After it finishes |[ it- | no j 

copying, it will then 
prompt you to restart 

your system. Click "Yes" and your computer will shut down and 
restart. 



TCP/IP Configuration Setting 

IP Address 
Subnet Mask 
Primary DNS Server 
Secondary DNS Server 
Default Gateway 



Step 2. Disable HTTP Proxy 

You will need to verify that the "HTTP Proxy" feature of your Web 
browser is disabled. This is so that your Web browser will be able to 
view the configuration pages inside your Barricade Plus. The 
following steps are for Internet Explorer and for Netscape. 
Determine which browser you use and follow the appropriate steps. 
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Internet Explorer 



Open Internet Explorer 
and click the stop button. 
Click "Tools," then 
"Internet Options." 



2. In the "Internet 
Options" window click 
the "Connections" tab. 
Next, click the "LAN 
Settings..." button. 

3. Clear all the 
checkboxes. 



4. Click "OK," and then 
click "OK" again to close 
the "Internet Options" 
window. 



] File Edit View Favorites 


Tools Help 


*■ . + 

Back Forward 


Mail and News ► 
Windows Update 


fi 

Seal 
• * 


J Address \^} 


MSN Messenger Service 
Show Related Links 


J Links .f] Best ol the Web #]C 









Security ] Content Connections j Programs | Advanced | 

Setup. . i| 



Use the Internet Connection Wizard to 
—I connect )>gu? computer to the Internet. 



(* Never dial a connection 

C" Dial whenever a network coni-ieciiciri it not present 
C Always . lection 

Current default Hone Set Default 

r Perform sjisiern security check before dialing 



Local Area Network [LAN) settings 



Local ; 

L 



LAN Settings.. | 



Local Area Network (LAN) Settings 



-Automatic configuration 

Automatic conliguration rnaj- 1 override manual setting;-. i"o ensure trie 
use ol manual sellings, disable automatic configuration 

T _. :■( ,i. Mi - -3-t r- ?">■■;. 

f~ Use automatic configuration script 



rProny server 

|~~ Use a proxy s< 

Address: | 

I 



|~ Bypass proxy 
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Netscape 

1. Open Netscape and click the stop 
button. Click "Edit," then click 
"Preferences..." 



2. 



File | Edit View Go Window Help 



In the 

"Preferences" 
window, under 
"Category" 
double-click 
"Advanced," 
then click 
"Proxies." Select 
"Direct 
connection to 
the Internet." 
Click "OK." 



- Appe<: 





Ctrl+X 


Copy 


Ctrl+C 


Paste 


Ctrl+V 


Select All 


Ctrl+A 


Find in Page.. 


Ctrl+F 


Search Internet 







4t ^ 

Home Search 



I 

People (51 Yellow 



Configure proHiaslo 



i r-iet'.'Jorl pic . is usei le acl lib nal security b Iwi en yo n 

computer and the Internet (usually along rffh a firewall] and/or to 
increase performance between networks by reducing redundant tra 

f Manual proxy cpnliguration j 

'" Automatic proxy configuration 
Configuration location [URL]: I 



II 



Repeat these 

steps for each Windows 95/98/Me computer connected to your 
Barricade Plus. 



Step 3. Obtain IP Settings from Your Barricade Plus 

Now that you have configured your computer to connect to your 
Barricade Plus, it needs to obtain new network settings. By releasing 
any old IP settings and renewing them with settings from your 
Barricade Plus, you will also verify that you have configured your 
computer correctly 
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1. Click "Start," then "Run.. 




^3 



Type the name of & prpsraiTi, 'Folder, document or Internet 



ind V/ii"i do I'Vill Kioetn it for you. 



Open: |WINIPCFG| 



OK Cancel 



IP Configu ratio 



Ethernet Adapter 



Type "WINIPCFG" and 
click "OK." It may take a 
minute or two for the "IP 
Configuration" window to 
appear. 

From the drop-down menu, 
select your network card. 
Click "Release" and then 
"Renew." Verify that your 
IP address is now 
192.168.2.xxx, your Subnet 
Mask is 255.255.255.0 and 
your Default Gateway is 
192.168. 2.1. These values 

confirm that your Barricade Plus is functioning. Click "OK" to 
close the "IP Configuration" window. 



~3 



IE 



L 



Adapter Address | 00-EQ-29-75-35-9E 
IP Address |~~ 
Subnet Mask 



192.168.2.161 



r 

Default Gateway |~ 



255.255255.0 
192.163.2.1 
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Configuring Your Computer with Windows 2000 
Step 1. Configure TCP/IP Settings 

After you have completed the hardware setup, you need to configure 
your computer to connect to your Barricade Plus. You also need to 
determine how your ISP issues your IP address. Many ISPs issue these 
numbers automatically, using a networking technology known as 
Dynamic Host Configuration Protocol, or DHCP. Other ISPs will 
specify your IP address and associated numbers, which you must 
enter manually. This is also known as a static IP address. How your 
ISP assigns your IP address determines how you will configure your 
computer. 

Here is what to do: 



1 . From the Windows 

desktop, click the "Start" 
button. Choose 
"Settings," then click 
"Control Panel." 



Windows Update 




Szl _"r*i\ Programs ► 
Er] \t Documents ► 




Control Panel 


■9 Sii) 5earch * 
pj } Help 


=dl Network snd Dial-up ConrniCLions 
~&\ Printers 

^ Taskbar&StartMenu... 


1-1 Run... 




tj E^JI Shut Down... 


[listart a ® O 1 
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Double-click the 
"Network & 
Dial-Up 

Connections" icon. 



Double-click the 
icon that corresponds 
to the connection to 
your Barricade Plus. 



4. Click "Properties." 



Favorites Tools 



■s iid Control 



_J JlSWKh Folders jHistory K X « ~ • 



Control Panel 
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Jphone and Power Options 
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Network and Dial- 




Make Mew 1 Local Area ! 
Connection iCormactiEfri 11 
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This i : o'ci« contains n at work 
connections for this computer, and 
a wizard to help you create a new 
connection, 







Local Area Connection 1 Status 



Connection 
Status: 
Duration: 



Connected 
00:15:12 
10.0 Mbps 
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Packets: 


49 | 0 



Properties ! 
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Double-click "Internet 
Protocol (TCP/IP)." 



Local Area Connection 1 Properties 



General | Sharing | 

Conned using: 



3j? SMC EZCard 10/100 [SMC1211TX] 



Compi mi necked an used by thi conne tii n i 



tnfigure j 



I 



0 iU Client for Microsoft Networks 
* SMC EZStart Service 

0 ^ File and Frintei Sharing lor Microsoft Networks 

0T1 



interne; Protocol (TCFVIr) 



Control Protocol/Internet Protocol. The delau 
ea network protocol that provides communication 
diverse interconnected networks. 



Show Icon in i^jkb^s when connected 



6. All the information that 
you need to record is on 
the "Internet Protocol 
(TCP/IP) Properties" 
dialog box. Use the 
spaces below to record 
the information. 

If "Obtain an IP address 
automatically" and "Obtain 
DNS server address 
automatically" are already 
selected, your computer is 
already configured for 
DHCP. Click "Cancel" to 
close each window, and skip 
to Step 2 "Disable HTTP 
Proxy." 



Internet Protocol (TCP/IP) Propert 



You can ge\ IP settings assigned automatically if your network supports 
this capacity. Otherwise, you need to ask your nefwoik a dm in i sir at or roi 
the appropriate IP settings. 



■ ; . .1- .J-.-. j ',. j 1 ■ . ■ 

C Use the following IP address: 

IP address: 

Subnet mask: |~ 
Delault gateway: 



* Obi air DNS server iddiess automatically 
r r Use the following DNS se 

Preterred DNS server: 
Alternate DNS server: 



5-17 



Setting TCP/ IP to Work with the Barricade Plus 



7. Select "Obtain an IP address automatically" and then select 
"Obtain DNS server address automatically." Then click "OK." 
Click "OK" or "Close" to close each window. 

TCP/IP Configuration Setting 

IP Address . . . 

Subnet Mask . . . 

Primary DNS Server . . . 

Secondary DNS Server . . . 

Default Gateway . . . 

Step 2. Disable HTTP Proxy 

You will need to verify that the "HTTP Proxy" feature of your Web 
browser is disabled. This is so that your Web browser will be able to 
view the configuration pages inside your Barricade Plus. The 
following steps are for Internet Explorer and for Netscape. 
Determine which browser you use and follow the appropriate steps. 

Internet Explorer 



1. Open Internet Explorer 
and click the stop button. 
Click "Tools," then 
"Internet Options." 



>9 Microsoft Interne! Explorer 


] File Edit View Favorites 


Tools Help 


Back Forward 


Mail and News ► 
Windows Update 
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J Address \^} 


MSN Messenger Service 
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Internet Options.. 
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In the "Internet 
Options" window click 
the "Connections" tab. 
Next, click the "LAN 
Settings..." button. 



3. Clear all the 
checkboxes. 

4. Click "OK," and then 
click "OK" again to close 
the "Internet Options" 
window. 



Netscape 

1. 



| Security | Content Connections | Programs] Advanced] 



Use the Internet Connection Wizard to 
connect your computer to the Internet 




Local Aiea Network (LAN) Settings 



-Automatic configuration 

Automatic configuration may override manual settings, To e 
use of manual settings, disable automatic configuration. 

~ _ !■ at II detect settings 



I - Use automatic configuration script 

Address |~~ 



Proxy server 

\~ Use a proxy server 

Address: | 

I Bypass proxy 



Open Netscape and click the stop 
button. Click "Edit," then click 
"Preferences..." 
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In the 

"Preferences" 
window, under 
"Category" 
double-click 
"Advanced," 
then click 
"Proxies." Select 
"Direct 
connection to 
the Internet." 
Click "OK." 



El 



- Navigator 

Applications 

deniitu 

- Advanced 

Proxies 



r i (i 1 1 1 ' 11 i i r ' . t 

computer and the Internet [ucualiv along w'llh a firei.jall] end/or to 
increase perroimance between networks by reducing redundanl tr e 



t~ Aulorfralic pio>:y eontiguralion 
Configuration |ocaiicn lURLi: [ 




_J Cancel Help | 



Step 3. Obtain IP Settings From Your Barricade Plus 

Now that you have configured your computer to connect to your 
Barricade Plus, it needs to obtain new network settings. By releasing 
any old IP settings and renewing them with settings from your 
Barricade Plus, you will also verify that you have configured your 
computer correctly. 

1 . From the Windows 
desktop, click the 
"Start" button, then 
"Programs," then 
"Accessories," and 
then click 
"Command 
Prompt." 




'■^j- Documents 

Settings 
<5J search 

^ Hdp 



C§ Communicator 

^ Internet Explorer 

-lj Outlook Express "rf Paint 

S 3 WordPad 
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In the "Command Prompt" window, type "IPCONFIG / 
RELEASE" and press the <ENTER> key. 



El] Command Prompt 
D:\MPCONFIG /RELEASE 
Windows 2000 IP Configuration 

IP address successfully released for adapter "Local Area Connecti 

D:\> 



Type "IPCONFIG /RENEW" and press the <ENTER> key. 
Verify that your IP address is now 192.168.2.xxx (2-255), your 
Subnet Mask is 255.255.255.0 and your Default Gateway is 
192.168.2.1. These values confirm that your Barricade Plus is 
functioning. 



|° : ^ Command Prompt 
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D:\MPCONFIG /RELEASE 






Windows 2000 IP Configuration 






IP address successf Lilly released for 


adapter "Local 


Area Connection" 


D:\MPCONFIG /RENEW 






Windows 2000 IP Configuration 






Ethernet adapter Local Area Connecti* 


m - 




Connection— specif ic DNS Suff: 
IP Address 

Default Gateway , 


be . : 

. . . : 192.168 
. . . : 255.255 
. . . : 192.168 


.2. 1KB 
.255.9 
.2.1 


D:\> 







Type "EXIT" and press <ENTER> to close the "Command 
Prompt" window. 
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Configuring Your Computer with Windows XP 
Step 1. Configure TCP/IP Settings 

After you have completed the hardware setup, you need to configure 
your computer to connect to your Barricade Plus. You also need to 
determine how your ISP issues your IP address. Many ISPs issue these 
numbers automatically, using a networking technology known as 
Dynamic Host Configuration Protocol, or DHCP. Other ISPs will 
specify your IP address and associated numbers, which you must 
enter manually. This is also known as a static IP address. How your 
ISP assigns your IP address determines how you will configure your 
computer. 

Here is what to do: 

1 . From the Windows 

desktop, click the "start" 
button. Choose "Control 
Panel." 





g Log Off [ 


j)J Shut Down 


'•S start 
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& 

0 



Internet 

Internet Explorer 



■I E-mail 

Outlook Express 



Windows Media Player 



I Tour Windows XP 



rij Files and Settings Transfer 
133 Wizard 



All Programs ^ 



^Jf My Documents 
| ^ My Recent Documents 
J^) My Pictures 
^ My Music 
j^J My Computer 



Control Panel 



Connect To 
Printers and Faxes 

Help and Support 
j^) Search 
Pun... 



Configuring Client TCP/ IP 



Select the "Network 
and Internet 
Connections" icon, 
then click the 
"Network 
Connections" icon. 



f Search [p Folders I [HH- 



3. Double click on the 
"LAN or High-Speed 
Internet." 



4. Click "Properties.' 




Dial-up 




Disconnected 
Lucent Win Modem 



LAM or High-Speed Internet 



Local Area Connection 2 
Enabled 
JBLj f.RISM25.IEJEE 6CI2...1 1...P' 



- 1 - Local Area Connection 2 Status 
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Connection- 
Status: 
Duration: 
Speed: 



Connected 
00:47:33 
11.0Mbps 



43 | 



Received 
43 



[ Properties J [ Disable 
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Double-click "Internet 
Protocol (TCP/IP)." 



6. All the information 
that you need to 
record is on the 
"Internet Protocol 
(TCP/IP) Properties" 
dialog box. Use the 
spaces below to record 
the information. 

If "Obtain an IP address 
automatically" and 
"Obtain DNS server 
address automatically" are 
already selected, your 
computer is already 
configured for DHCP. 
Click "Cancel" to close 
each window, and skip to 
Step 2 "Disable HTTP Proxy." 



4- Local Area Connection 2 Properties 



General Authentication Advanced 
Connect using: 



PRISM25 IEEE 802.11 PC Caid 



Conligure. .. 



This connection uses the following items: 

^ ^Client for Microsoft Networks 

0 J^File and Printer Sharing lor Microsoft Networks 

^ £!QoS Packet Scheduler 



Internet Protocol [TCP/IP] 



Description 

T lansmiisnon Control Protocol/Internet Protocol. The default 
wide ciess network protocol that ptovides communication 
across diverse interconnected networks. 



I I Show icon in notification area when connected 



Internet Protocol [TCP/IP) Properties 



General | Alternate Configuration | 

You car; get IP sewings, ^signed automatically if your i :etwon< support;. 
Shis capability Otherwise, you need to ask your network administrate! tor 
the appropriate IP settings. 



Obtain an IP address, automatically 
Use the following IP address: 

IP address: 
Subnet mask: 



Default gateway: 

0 Obtain DNS server address automatically 
0 Use the following DNS server addresses: 

Preferred DNS server: | 

Alternate DNS server: 
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7. Select "Obtain an IP address automatically" and then select 
"Obtain DNS server address automatically." Then click "OK." 
Click "OK" or "Close" to close each window. 

TCP/IP Configuration Setting 

IP Address . . . 

Subnet Mask . . . 

Primary DNS Server . . . 

Secondary DNS Server . . . 

Default Gateway . . . 

Step 2. Disable HTTP Proxy 

You will need to verify that the "HTTP Proxy" feature of your Web 
browser is disabled. This is so that your Web browser will be able to 
view the configuration pages inside your Barricade Plus. The 
following steps are for Internet Explorer and for Netscape. 
Determine which browser you use and follow the appropriate steps. 

Internet Explorer 

1 . Open Internet Explorer 
and click the stop 
button. Click "Tools," 
then "Internet Options." 
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File Edit View Favorite? 


9 Help 
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In the "Internet 
Options" window click 
the "Connections" tab. 
Next, click the "LAN 
Settings..." button. 



3. Clear all the 
checkboxes. 

4. Click "OK," and then 
click "OK" again to close 
the "Internet Options" 
window. 



Internet Options 



General Security Privacy Content Connections Programs Advanced 



To set up an Internet connection, click 
Setup. 



[ Setup... 



Dial-up and Virtual Private Network settings 



Settings... 



Choose Settings if you need to configure a proxy 
server for a connection. 

Never dial a connection 
O Dial whenever a nejwqiriponnetxion is not present 
Always dial my default connection 

Current None Set Default 



Local Area Network (LAN) settings 

LAN Settings do not apply to dial-up connections. 
Choose Settings above for dial-up settings. 



Cancel ] 



Local Area Network (LAN) Settings 



Automatic configuration 

Automatic configuration may override manual settings , To ensure the 
use of manual settings, disable automatic configuration. 

Automatically detect settings 

QtJse automatic configuration script 

ft dd, ess I — | 



Proxy server 

□ 



Us; a proxy server for your LAN (These settings will not apply to 
dial-up or VPN connections). 



Address: 



Bypass proxy server for local addresses 



| Advanced.. 
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Step 3. Obtain IP Settings From Your Barricade Plus 

Now that you have configured your computer to connect to your 
Barricade Plus, it needs to obtain new network settings. By releasing 
any old IP settings and renewing them with settings from your 
Barricade Plus, you will also verify that you have configured your 
computer correctly. 

1. From the Windows desktop, click the "Start" button, then 
"Programs," then "Accessories," and then click "Command 
Prompt." 
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2. In the "Command Prompt" window, type "IPCONFIG / 
RELEASE" and press the <ENTER> key. 



Command Prompt 






2:\>ipconf ig /release 
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Jindows IP Configuration 

Ethernet adapter Local Area Connect ion - 
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Connection— specif ic DNS Suffix . : 
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0.0.0 
0.0.0 










- 





3. Type "IPCONFIG /RENEW" and press the <ENTER> key. 
Verify that your IP address is now 192.168.2.xxx (2-255), your 
Subnet Mask is 255.255.255.0 and your Default Gateway is 
192.168.2.1. These values confirm that your Barricade Plus is 
functioning. 



Command Prompt 












* 


C:\>ipconf ig /release 














If in do us IP Configuration 












J 


Ethernet adapter Local Ar 


a Con 


lection : 








Connect ion— specif 
IP Address. . . . 
Subnet Mask . . . 
Default Gateway . 


lc DNS 


Suffix 


'. 1 0.0 
. : 0.0 


0.0 
0.0 






C:S>ipconf ig /renew 














If in do us IP Configuration 
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Type "EXIT" and press <ENTER> to close the "Command 
Prompt" window. 
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Configuring Your Computer with Windows NT 4.0 
Step 1. Configure TCP/IP Settings 

After you have completed the hardware setup, you need to configure 
your computer to connect to your Barricade Plus. You need to 
determine how your ISP issues your IP address. Many ISPs issue these 
numbers automatically using a networking technology known as 
Dynamic Host Configuration Protocol, or DHCP. Other ISPs will 
specify your IP address and associated numbers, which you must 
enter manually. This is also known as a static IP address. How your 
ISP assigns your IP address determines how you will configure your 
computer. 

Here is what to do: 

1 . From the Windows 
desktop click "Start," 
then "Settings," and 
click "Control 
Panel." 
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2. Double-click the "Network" icon. 



3aG 



Fib Edit View Help 



Add/Remove Console Date/Time Devices 
Programs 



nternet Keyboard Moderns Mouse 



PC Card 
(PCMCIA; 



3. Select the 
"Protocols" tab. 

4. Double-click "TCP/ 
IP Protocol." 



Identification j Services Protocols j Adapters | Bindings] 
Network Protocols: 



T" NetBEUI Protocol 





Add... 


] Remove 


Properties... 


Update | 



Description: — 

Transport Control Protocol/Internet Protocol. The default wide 
area network protocol that provides communication across 
diverse interconnected networks 



- 
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5. Select the "IP 
Address" tab. 

6. In the "Adapter" 
drop-down list, be 
sure your Ethernet 
adapter is selected. 

If "Obtain an IP address 
automatically" is already 
selected, your computer 
is already configured for 
DHCP. Click "Cancel" 
to close each window, 
and skip to Step 2 
"Disable HTTP Proxy." 

7. In the "TCP/IP 
Properties" dialog 
box, click the IP 
address tab to locate 
your IP address, 
Subnet Mask, and 
Default Gateway. 
Record these values 
in the space provided 
below. 

8. Click the "DNS" tab 
to see the primary 
and secondary DNS 
servers. Record these 
values in the 
appropriate spaces 
below. 



Microsoft TCP/IP Properties 



IP Address j DNS | WINS Address j Routing ] 



An IP address can be automatically assigned to this network card 
by a DHCP server. If your network does not have a DHCP server, 
ask your network administrator for an address, and then type it in 
the space below. 



Adapter: 



f Obtain an IP address from a DHCP server 

E? Specify an IP address 

}P Address: | 192 . 163 . 123 . 4 



Subnet Mask: | 255 . 255 . 255 . 0 




DNS Service Search Urdei 



Domain Suffix Search Order 



Add... J Edit... | _ R emove I 



OK | Cancel | Apply 
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9. After writing down your IP settings, click the IP address tab. 
Select "Obtain IP address automatically" and click OK. Click OK 
again to close the "Network" window. 

10. Windows may copy some files, and will then prompt you to 
restart your system. Click "Yes" and your computer will shut 
down and restart. 



TCP/IP Configuration Setting 

IP Address 
Subnet Mask 
Primary DNS Server 
Secondary DNS Server 
Default Gateway 
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Step 2. Disable HTTP Proxy 

You will need to verify that the "HTTP Proxy" feature of your Web 
browser is disabled. This is so that your Web browser will be able to 
view the configuration pages inside your Barricade Plus. The 
following steps are for Internet Explorer and for Netscape. 
Determine which browser you use and follow the appropriate steps. 

Internet Explorer 



1 . Open Internet Explorer 
and click the stop button. 
Click "Tools," then 
"Internet Options." 



2. In the "Internet 

Options" window click 
the "Connections" tab. 
Next, click the "LAN 
Settings..." button. 
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3. Clear all the checkboxes. 

4. Click "OK," and then 
click "OK" again to close 
the "Internet Options" 
window. 



Local Area Network (LAN) Settings 



■ Automatic configuration 

Automatic configuration ma^ 1 override manual settings, i"o ensure the 
use of manual settings, disable automatic configuration. 

r _. >r 31 • in- .j~ 1- 

r Use automatic c, 



-Prony server — 
l~~ Use a proxy 




Netscape 

1 



Open Netscape and click the stop 
button. Click "Edit," then click 
"Preferences..." 



In the 

"Preferences" 
window, under 
"Category" 
double-click 
"Advanced," 
then click 
"Proxies." Select 
"Direct 
connection to 
the Internet." 
Click "OK." 
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People 0 Velio 




■'■ Iitioi 1 ■ ■ ■■ uril.(i bs . ■ 

nW'j along with a firewall) arid/or !o 
-1 networks by reducing redundant traffic 



OK I Cancel | Help | 
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Step 3. Obtain IP Settings From Your Barricade Plus 

Now that you have configured your computer to connect to your 
Barricade Plus, it needs to obtain new network settings. By releasing 
any old IP settings and renewing them with settings from your 
Barricade Plus, you will also verify that you have configured your 
computer correctly. 

1 . From the Windows 
desktop, click the 
"Start" button, then 
"Programs," and then 
select "Command 
Prompt." 

2. In the "Command 
Prompt" window, 
type "IPCONFIG / 
RELEASE" and press 
the <ENTER> key. 



Programs ► 


Accessories 
Ljjf) Startup 


► 
^ 


Documents ► 




^ Command Prompt 


Settings * 


Jc^ Windows NT Explorer 


Find ► 


Administrative Tools [Common) 


► 


Help 


Barricade Utility 
_Ej Startup 


► 
► 


Run... 


jij WLAN Bridge Utility 





iiSStard 



^] Command Prompt 






licrosoft Windows 2090 [Version 5.09.2195] 
CO Copyright 1985-1999 Microsoft Corp. 






S:\MPCONFIG /RELEASE 






J in do us 2000 IP Coof iguration 






IP address successfully released for adapter "Local Area Conoectio 


o 1" 




^:\>_ 
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3. Type "IPCONFIG /RENEW" and press the <ENTER> key. 
Verify that your IP address is now 192.168.2.xxx, your Subnet 
Mask is 255.255.255.0 and your Default Gateway is 192.168.2.1 
These values confirm that your Barricade Plus is functioning. 



^il Command Prompt 

licrosoft Windows 2000 [Version 5.00.21751 
CO Copyright 1985-1999 Microsoft Corp. 

S:\MPCONFIG /RELEASE 

J in do us 2000 IP Configuration 

IP address successfully released for adapte 

^:\>IPC0NFIG /RENEU 

■I in do us 2000 IP Configuration 

Ethernet adapter Local Area Connection 1: 

-specific DNS Suffi 



IP Addn 
Subnet Hash . . 
Default Gateuay 



192.168.2.125 
255.255.255.0 
192.168.2.254 



4. Type "EXIT" and press <ENTER> to close the "Command 
Prompt" window. 

Configuring Your Macintosh Computer 

You may find that the instructions here do not exactly match your 
screen. This is because these steps and screenshots were created using 
Mac OS 8.5. Mac OS 7.x and above are all very similar, but may not 
be identical to Mac OS 8.5. 

Step 1. Configure TCP/IP Settings 

After you have completed the hardware setup, you need to configure 
your computer to connect to your Barricade Plus. You need to 
determine how your ISP issues your IP address. Many ISPs issue these 
numbers automatically using a networking technology known as 
Dynamic Host Configuration Protocol, or DHCP. Other ISPs will 
specify your IP address and associated numbers, which you must 
enter manually. This is also known as a static IP address. How your 
ISP assigns your IP address determines how you will configure your 
computer. 
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Here is what to do: 



1 . Pull down the 
Apple Menu. Click 
"Control Panels" 
and select TCP/IP. 



In the TCP/IP 
dialog box, 
make sure that 
"Ethernet" is 
selected in the 
"Connect Via:" 
field. 



3 File Edit View Special 


Help 


About This Computer 




© Apple DVD Player 






Apple System Profiler 






g Calculator 






$S Chooser 






p[ Clipboard alias 






Control Panels 




Appeai'ance 


Igl Favorites 
(jj Key Caps 

Microsoft Office 98 


► 


Apple Menu Options 

AppleTalk 

ColorSync 

Configuration Manager 
Control Strip 


Network Browser 




Date & Time 


^ Note Pad alias 




Energy Saver 


|jy QuickTime Player 
l«| Recent Applications 
(qlL Recent Documents 
||L Recent Servers 
[Tgf Remote Access Status 
OH Sci'apbook 




Extensions Manager 
File Exchange 
File Sharing 
General Controls 
Internet 

Iomega Drive Options 
Keyboai'd 


Sherlock 2 




Launcher 


SimpleText alias 




Location Manager 


Stickies 




Memory 
Modem 










Mo nitors 






Mouse 






MouseWare 






Multiple Users 






QuickTime™ Settings 






Remote Access 






Software Update 






Sound 






Speech 






Startup Disk 






TCP/IP 






Text 






USB Printer Sharing 






Web Shai'ing 



[ Ethernet 



_iJ 



ifigui-e: [ Using DHCF Ser 



DHCP Client ID: 



v ill be supplied by & 
•/ill be supplied by s. 
vill be supplied by si 

vill be supplied by s> 
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If "Using DHCP Server" is already selected in the "Configure" field, 
your computer is already configured for DHCP. Close the TCP/IP 
dialog box, and skip to Step 2 "Disable HTTP Proxy." 

3. All the information that you need to record is on the "TCP/IP" 
dialog box. Use the space below to record the information. 

4. After writing down your IP settings, select "Using DHCP Server" 
in the "Configure" field and close the window. 



Another box will 
appear asking whether 
you want to save your 
TCP/IP settings. 
Click Save. 



A 



Save changes to the current configuration? 



Savingthe changes may interrupt any TCP/IP 
services currently established. 



| Don't Save 



| Cancel 



TCP/IP Configuration Setting 

IP Address 
Subnet Mask 
Router 
Name Server 



Step 2. Disable HTTP Proxy 

You will need to verify that the "HTTP Proxy" feature of your Web 
browser is disabled. This is so that your Web browser will be able to 
view the configuration pages inside your Barricade Plus. The 
following steps are for Internet Explorer and for Netscape. 
Determine which browser you use and follow the appropriate steps. 
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Internet Explorer 

1 . Open Internet Explorer and click the 
stop button. Click "Edit" and select 
"Preferences." 



2. 



In the 

Internet 

Explorer 

Preferences 

window, 

under 

Network, 

select 

Proxies. 

Uncheck 
all 

checkboxes 
and click 
OK. 



g Hie 


ffl View Go Favor 




cut sex 

Copy 3gC 

Paste aev 
Clear 




Back 


Address : 


SelectAII SA 




Find... SEP 
Find Again §€G 







Internet Explorer Preferences = 



O Security 

fit Security Zones 

O Ratings 

O Advanced 
7 Forms AutoFill 

Q Forms AutoCsrnplets 

• AutoFill Profile 
Receiving Files 

Q Download Options 

O File Helper; 

O Cookies 
Network 

O Protocol Helpers 

O Proxies 

O Site Passwords 
W E-mail 

O General 



If you are accessing the Internet from e private network , you can s<M 
gateways to allow Internet access Contact your network manager for 
mors information Note: These settings are she red with other 
applications through Internet Config. 

r Use Prexy Servers 

□ Web Proxy: 



] [ Settir 



□ Use Web Proxy for all 
P Bypass Web Proxy for FTP 

□ Secure Proxy: | 

□ Mail Proxy: 



] | Settir 



□ Gopher Proxy: Q 



] | Settir 



] | Settir 



[ Cancel ] [ OK 



List the sites you want to connect to directly, byps^sl the proYis::s 
set above. Put a apace or comma between each site. 
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Netscape 

1 



2. 



Open Netscape and click the stop 
button. Click "Edit" and select 
"Preferences." 



In the 

"Preferences" 

dialog box, In 

the left-hand 

column 

labeled 

"Category," 

select 

"Advanced." 

Under the 

"Advanced" 

category, 

select 

"Proxies." 



g File 


ffl View Go Favor 




Cut sx 
copy aec 

Paste XV 
Clear 




Back 


Address: 


SelectAII SA 


@M-arc 


Find... 3GF 
Find Again 







Preferences 



Applications 




Smart Browsing™ 




Mail & Newsgroups 




Identity 




Mail Servers 




News Servers 




Addressing 




Messages 
Window Settings 




Copies & Folders 




Formatting 


Return Receipts 


Disk Space 


Composer 


Publish 




<T Roaming Access 




Server Info 




File Selection 




^ Offline 




Download 




■v - Advanced 




Cache 


_ 


Proxies 




SmartUpdate 





A network proxy is used to provide additional security between your 
computer «sd the Internei (usually along with 5 fir ova 1 1) and/or to 
increase performance between networks by reducing redundant traffic 
via caching Your system adminstrator can provide you with proper 
proxy settings 



©Direct conn* 

Q Manual pro* 

Q Automatic p 
Configuratio 



ction to the Internet 

y configuration 

roxy configuration 
a location (UPL) 



3. Select "Direct Connection to the Internet" and click OK. 
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Step 3. Obtain IP Settings From Your Barricade Plus 

Now that you have configured your computer to connect to your 
Barricade Plus, it needs to obtain new network settings. By releasing 
any old IP settings and renewing them with settings from your 
Barricade Plus, you will also verify that you have configured your 
computer correctly. 



1 . Pull down the Apple 
Menu. Click "Control 
Panels" and select 
TCP/IP. 



„ File Edit View Special 


Help 


About This Computer 






© Apple DVD Player 






i@ Apple System Profiler 






|| Calculator 






£a Chooser 






pj Clipboard alias 






te" Control Panels ► 


Appearance 


Favorites 
Up Key Caps 
Bl Mill 

Microsoft Office 98 


1 


Apple Menu Options 

AppleTalk 

ColorSync 

Configuration Manager 
Control Strip 


[U Network Browser 




Date &Time 


P Note Pad alias 




Energy Saver 


QuickTime Player 
Igjj. Recent Applications 
Igj Recent Documents 
H], Recent Servers 
rjf Remote Access Status 
OH Sci'apbook 


► 
1 
1 


Extensions Manager 
File Exchange 
File Sharing 
General Controls 
Internet 

Iomega Drive Options 
Keyboard 


jp Sherlock 2 




Launcher 


SimpleText alias 
Stickles 




Location Manager 

Memory 

Modem 










Monitors 






Mouse 






MouseWare 






Multiple Users 






QuickTime 7 " Settings 






Remote Access 






Software Update 






Sound 






Speech 






Startup Disk 






TCP/IP 






Text 






USB Printer Sharing 






Web Sharing 
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r- Setup 



[ Ethernet 



13 



[Using DHCF Ser 



IE 



DHCP Client ID: 



In the TCP/IP 
window, your 
new settings will 
be shown. Verify 
that your IP 
address is now 
192.168.2.xxx, 
your Subnet Mask 
is 255.255.255.0 
and your Default 
Gateway is 
1 92.1 68.2.1 . These 

values confirm that your Barricade Plus is functioning. 



II be supplied by $• 
II be supplied by s 
II be supplied by s 

v ill be supplied by s 1 



3. Close the TCP/IP window. 
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Dynamic IP Allocation via a DHCP Server 

Select "Obtain an IP address automatically" in the IP Address tab. Do 
not input any values under the "Gateway" tab, and choose "Disable 
DNS" in the "DNS Configuration" tab. These settings will be 
automatically configured by the DHCP server. Click "OK" and 
reboot your system to implement the changes. 



Bindings | Advanced ) NetBIOS | 
DNS Configuration J Gateway J WINS Configuration IP Address j 



A;: IP address car be eufom.* ; ; r.!- M ." 
If your network does not auto 
your network administrator for 
the space below. 



TCP/IP Properties 




HES 




Bindings 


Advanced 


NetBIOS 



r 



P §j [an] =ddre ai The first gateway in the Install-^ 
The address order in the list \\\ 
machines are used 



Bindings Advanced j NetBIOS | 

DNS Configuration | Gateway | WINS Cgnfiguratign | IPAddress j 




5-43 



Setting TCP/ IP to Work with the Barricade Plus 



Manual IP Configuration 

1. Select "Specify an IP address" in the "IP Address" tab. Select an IP 
address based on the default network 192.168.2.X (where X is 
between 2 and 254), and use 255.255.255.0 for the Subnet Mask. 

2. In the "Gateway" tab, add the IP address of the Barricade Plus 
(default: 192.168.2.1) in the "New gateway" field and click "Add." 

3. In the "DNS Configuration" tab, add the IP address for the Barricade 
Plus and click "Add." This automatically relays DNS requests to 
the DNS server(s) provided by your ISP. Otherwise, add specific 
DNS servers into the "DNS Server Search Order" field and click 
"Add." 



Bindings | Advanced j NetBIOS 

[■N: .ll-J- I 3 ■■ . | 3V | N !- ! ..Ml : ■ ■-. r . |F - 

Bindings ] Advanced | NetBIOS 
An IP address can be automatically assigned to this cornput DNS Configuration Gateway | WINS Configuration ] IPAddress 
I! youi network, due; not automatically assign IP addresses, 
your network administrator for an address, and then type it ir 
the space below. 



The first gateway in the Installed Cisieway list will be the default 
The address order in the list will be the order in which these 
machines are used. 



f~" Obtain an IP address automatically 
Specify an IP address; 



IP Address: 



1 1 9? . IBS . 2 . ?? I 

Subnet Mask; 1255.255. 255 



±2 



Bindings ] Advanced | NetBIOS 
DNS Configuration | Gateway | WINS Configuration j IPAddress 

r Disable DNS 
Enable DNS 



Host; |MyComputer 

DNS Server Search Order — 
1 1 68 . 95 .192. 1 



■Lin Suifi:-: Search Order - 



D dm a in: 
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4. After finishing TCP/IP setup, click "OK," and then reboot the 
computer. After that, set up other PCs on the LAN according to 
the procedures described above. 

Verifying Your TCP/IP Connection 

After installing the TCP/IP communication protocol and configuring 
an IP address in the same network with the Barricade Plus, you can 
use the "Ping" command to check if your computer is successfully 
connected to the Barricade Plus. The following example shows how 
the Ping procedure can be executed in an MS-DOS window. First, 
execute the "Ping" command: 

ping 192.168.2.1 

If the following messages appear: 

Pinging 192.168.2.1 with 32 bytes of data: 
Reply from 192.168.2.1: bytes=32 time=2ms TTL=64 

a communication link between your computer and the Barricade Plus 
has been successfully established. 

Otherwise, if you get the following messages: 

Pinging 192.168.2.1 with 32 bytes of data: 
Request timed out. 

there may be something wrong in your installation procedure. Check 
the following items in sequence: 

1 . Is the Ethernet cable correctly connected between the Barricade 
Plus and your computer? 

The LAN LED on the Barricade Plus and the Link LED of the 
network card on your computer must be on. 
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2. Is TCP/IP properly configured on your computer? 

If the IP address of the Barricade Plus is 192.168.2.1, the IP 
address of your PC must be from 192.168.2.2 - 192.168.2.254 and 
the Default Gateway must be 192.168.2.1. 

If you can successfully Ping the Barricade Plus, then you are now 
ready to connect to the Internet! 
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Appendix A 
Troubleshooting 



This appendix describes common problems you may encounter 
and possible solutions to them. The Barricade Plus can be easily 
monitored through panel indicators to identify problems. If you 
cannot resolve any connection problems after checking the 
indicators, then refer to the other sections in the following table. 



Troubleshooting Chart 


Symptom 


Action 


LED Indicators 


Power LED is Off 


• External power supply has failed or is 
disconnected. 

• Check connections between the Barricade Plus, the 
external power supply, and the wall oudet. 

• If the power indicator does not turn on when the 
power cord is plugged in, you may have a 
problem with the power oudet, power cord, or 
external power supply. 

However, if the unit powers off after running for 
a while, check for loose power connections, 
power losses or surges at the power outlet. 

If you still cannot isolate the problem, then the 
external power supply may be defective. In this 
case, contact SMC Technical Support for 
assistance. 
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Troubleshooting Chart 


Symptom 


Action 


LED Indicators 


Link LED is Off 


• Verify that the Barricade Plus and attached device 
are powered on. 

• Be sure the cable is plugged into both the Barricade 
Plus and the corresponding device. 

• Verify that the proper cable type is used and that 
its length does not exceed the specified limits. 

• Be sure that the network interface on the 
attached device is configured for the proper 
communication speed and duplex mode. 

• Check the adapter on the attached device and 
cable connections for possible defects. Replace 
any defective adapter or cable if necessary. 


Network Connection Problems 


Cannot Ping the 
Barricade Plus from the 
attached LAN, or the 
Barricade Plus cannot 
Ping any device on the 
attached LAN 


• Verify that the IP addresses are properly 
configured. For most applications, you should 
use the Barricade Plus' DHCP function to 
dynamically assign IP addresses to any host on 
the attached LAN. However, if you manually 
configure any IP addresses on the LAN, verify 
that the same network address (network 
component of the IP address) and subnet mask 
are used for both the Barricade Plus and any 
attached LAN devices. 

• Be sure the device you want to Ping (or from 
which you are Pinging) has been configured for 
TCP/IP. 
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Troubleshooting Chart 


Symptom 


Action 


Management Problems 


Cannot connect using 
the web browser 


• Be sure to have configured the Barricade Plus with 
a valid IP address, subnet mask and default 
gateway. 

• Check that you have a valid network connection 
to the Barricade Plus and that the port you are 
using has not been disabled. 

• Check the network cabling between the 
management station and the Barricade Plus. 


Forgot or lost the 
password 


• Press the Reset button on the front panel 
(holding it down for at least five seconds) to 
restore the factory defaults. 
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Appendix B 
Cables 



Ethernet Cable 

Specifications 



Cable Types and Specifications 


Cable 


Type 


Max. Length 


Connector 


10BASE-T 


Cat. 3, 4, 5 100-ohm UTP 


100 m (328 ft) 


RJ-45 


100BASE-TX 


Cat. 5 100-ohm UTP 


100 m (328 ft) 


RJ-45 



Twisted-pair Cable 

Caution: DO-NOT plug a phone jack connector into any RJ-45 
port. Use only twisted-pair cables with RJ-45 connectors 
that conform with FCC standards. 

For 10BASE-T/100BASE-TX connections, a twisted-pair cable 
must have two pairs of wires. Each wire pair is identified by two 
different colors. For example, one wire might be red and the other, 
red with white stripes. Also, an RJ-45 connector must be attached 
to both ends of the cable. All RJ-45 ports on the SMC7004FW, 
except for the WAN port, support automatic MDI/MDI-X 
configuration. This means that you can use straight- through cable 
to attach the LAN ports to any network device. However, when 
connecting the WAN port to a broadband modem, you will need to 
use either straight-through or crossover cable, depending on the 
port type used on the modem. 
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Cables 



Figure B-l illustrates how the pins on the RJ-45 connector are 
numbered. Be sure to hold the connectors in the same orientation 
when attaching the wires to the pins. 




Figure B-l. RJ-45 Connector Pin Numbers 



Straight-through Cable 



Straight-Through RJ-45 Pin Assignments 


End 1 


End 2 


1 (TD+) 


1 (TD+) 


2 (TD-) 


2 (TD-) 


3 (RD+) 


3 (RD+) 


6 (RD-) 


6 (RD-) 


Pins 4, 5, 7 and 8 are not connected. 


Crossover Cable 




Crossover RJ-45 Pin Assignments 


End 1 


End 2 


1 (TD+) 


3 (RD+) 


2 (TD-) 


6 (RD-) 


3 (RD+) 


1 (TD+) 


6 (RD-) 


2 (TD-) 



Pins 4, 5, 7 and 8 are not connected. 
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45 Port Pin Assignments 

All LAN ports on the Barricade Plus support automatic MDI/MDI-X 
configuration. This means that the pin signals in use will depend on 
whether the LAN port is operating in MDI or MDI-X mode. 
However, the WAN port is configured only for MDI-X mode. 



Pin 


MDI Signal Name* 


MDI-X Signal Name* 


1 


Transmit Data (TD+) 


Receive Data (RD+) 


2 


Transmit Data (TD-) 


Receive Data (RD-) 


3 


Receive Data (RD+) 


Transmit Data (TD+) 


6 


Receive Data (RD-) 


Transmit Data (RD-) 



Pins 4, 5, 7 and 8 are not connected. 

* The "+" and "-" signs represent the polarity of the wires that make 
up each wire pair. 
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Appendix C 
Specifications 



LAN Interface 

1 OBASE-T/ 1 OOBASE-TX 

4 RJ-45 ports 

WAN Interface 

10BASE-T/100BASE-TX, 1 RJ-45 port 

Indicator Panel 

LAN (Link, Activity), WAN (Link, Activity), Power 

Dimensions 

19.5 x 11.25 x 2.55 cm (7.68 x 4.43 x 1.00 in) 

Weight 

1.34 lbs (0.61 kg) 

Input Power 

12V (1A) 

Maximum Current 

0.04A RMS max.@110V/240V 

Power Consumption 

5 Watts max. @ 100-240 VAC 

Management 

Web management 

Advanced Features 

Dynamic IP Address Configuration - DHCP, DNS 
Firewall - Client privileges, hacker prevention and logging 
Virtual Private Network - PPTP, IPSec pass-through, VPN tunneling 
Stateful Packet Inspection 
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Specifications 



Internet Standards 

ARP (RFC 826), IP (RFC 791), ICMP (RFC 792), UDP (RFC 768), 
TCP (RFC 793), Telnet (RFC 854-859), MD5 (RFC 1321), BOOTP 
Extension (RFC 1497), PPP LCP Extension (RFC 1570), PPPoE 
(RFC 2516), NAT (RFC 1631), HTML (RFC 1866), HTTP (RFC 
1945), DHCP (RFC 2131), PPTP (RFC 2637) 

Temperature 

Operating 32 to 104°F (0 to 40°C) 
Storage -40 to 158°F (-40 to 70°C) 

Humidity 

5% to 95% (noncondensing) 

Compliances 

CE Mark 
Emissions 

FCC Class B 

VCCI Class B 

Industry Canada Class B 

EN55022 (CISPR 22) Class B 

C-Tick - AS/NZS 3548 (1995) Class B 
Immunity 

EN 61000-3-2/3 

EN 61000-4-2/3/4/5/6/8/11 
Safety 

UL 1950 

EN60950 (TUV) 

CSA 22.2 No. 950 

Warranty 

Limited Lifetime 
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Appendix D 
Ordering Information 



Barricade Plus Broadband Router Products 


SMC7004FW 


4-port Broadband Router with VPN 
-WAN /LAN 


SMC7004WFW 


4-port Wireless Broadband Router with VPN 
- WAN/LAN /WLAN 
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FOR TECHNICAL SUPPORT, CALL: 

From U.S.A. and Canada (24 hours a day, 7 days a week) 

(800) SMC-4-YOU; (949) 679-8000; Fax: (949)679-1481 

From Europe (8:00 AM - 5:30 PM UK Time) 

44 (0) 1 18 974 8700; Fax: 44 (0) 1 18 974 8701 



INTERNET 

E-mail addresses: 

techsupport@smc.com 

european.techsupport® smc-europe.com 
Driverupdates: 

http:/ /www. smc.com/ index. cfm?action=tech support drivers downloads 
Worid Wide Web: 

http://www.smc.com/ 
http://www.smc-europe.com/ 



FOR LITERATURE OR ADVERTISING RESPONSE, 



U.S.A. and Canada: 

Spain: 

UK 

France: 

Italy: 

Benelux : 

Central Europe: 

Switzerland: 

Nordic : 

Northern Europe: 

Eastern Europe: 

Sub Saharian Africa: 

North Africa: 

Russi a: 

PRC: 

Taiwan: 

Asia Pacific: 

Korea: 

Japan: 

Australia: 

India: 



(800) SMC-4-YOU; 
34-93-477-4935; 
44(0) 118 974 8700; 

33 (0) 41 38 32 32; 
39 02 739 12 33; 
31 33 455 72 88; 
49 (0) 89 92861-0; 
41 (0) 1 9409971; 
46 (0) 868 70700; 
44(0) 118 974 8700; 

34 -93-477-4920; 
27-11 314 1133; 
34 93 477 4920; 

7 (095) 290 29 96; 

86-10-6235-4958; 

886-2-2659-9669; 

(65) 238 6556; 

82-2-553-0860; 

8145-224-2332; 

61-2-9416-0437; 

91-22-8204437; 



CALL: 

Fax (949) 679-1481 
Fax 34-93-477-3774 
Fax 44(0) 118 974 8701 
Fax 33 (0) 41 38 01 58 
Fax 39 02 739 14 17 
Fax 31 33 455 73 30 
Fax 49 (0) 89 92861-230 
Fax 41 (0) 1 9409972 
Fax 46 (0) 887 62 62 
Fax 44(0) 118 974 8701 
Fax 34 93 477 3774 
Fax 27-11 314 9133 
Fax 34 93 477 3774 
Fax 7 (095) 290 29 96 
Fax 86-10-6235-4962 
Fax 886-2-2659-9666 
Fax (65) 238 6466 
Fax 82-2-553-7202 
Fax 8145-224-2331 
Fax 61-2-9416-0474 
Fax 91-22-8204443 



If you are looking for further contact information, please visit www.smc.com or 
www.smc-europe.com . 



SMC 

Networks 

38 Tesla Model Number: SMC7004FW 

Irvine, CA 92618 Revision Number: FLO E052002-R02 

Phone: (949) 679-8000 



